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(54) INFORMATION PROCESSING DEVICE AND METHOD, AND PROGRAM STORAGE MEDIUM 



(57) The CPU 11 of the personal computer 1 con- 
trols the CPU 32 of the adaptor 26 made of a, semicon- 
ductor IC to compute a hash value of a content- 
managing music data base recorded in the HDD 21 and 
store it into the nonvolatile memory 34. When playing 
back a content recorded in the HDD 21, the CPU 11 
computes the hash value of the music data base 
recorded in the HDD 21, compares it with hash values 
stored cumulatively in the nonvolatile memory 34, and 
controls the playback of the content from the HDD 21 
based on the result of the comparison. 
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Description 

Technical Field 

[0001] The present invention relates to an informa- 
tion processing apparatus and method, and to a pro- 
gram storage medium, and more specifically, to an 
information processing apparatus and method adapted 
to prevent falsification of a software used with data in 
order to inhibit fraudulent copying of the data, and a pro- 
gram storage medium having recorded therein an infor- 
mation processing program for the prevention of the 
fraudulent copying. 

Background Art 

[0002] Recently, as the digital technology has 
advanced and has become more popular, it has 
become possible to digitally record or play back a vari- 
ety of music data, image data, etc. to or from a record- 
ing medium. As a result, it has become possible to 
obtain data not lower in image or sound quality than its 
original data even after repealing data copying a plural- 
ity of times. 

[0003] With the development of the digital technol- 
ogy, however, the following problems have occurred: 

(1) For example, when a digital music data is copied 
from a compact disc (CD) to a hard disc of a per- 
sonal computer, the music data from the CD can be 
recorded as it is or compressed into the hard disc, 
so that the music data will be distributed fraudu- 
lently in a large volume via a network such as the 
Internet 

(2) When a digital music data is copied from a CD 
to a hard disc of a personal computer, the music 
data will be distributed in a large volume since the 
number of copies is not limited. 

(3) When a digital music data is copied from a hard 
disc of a personal computer to an external appara- 
tus such as portable device, the original digital 
music data will remain in the hard disc after the cop- 
ying, so that it will possibly be copied and distrib- 
uted in a large volume. 

(4) To prevent the problem (3) above, the software 
for the personal computer should be designed so 
that after the digital music data is copied to the 
external apparatus, the data in the hard disc being 
the data source is erased (the music data is 
moved). However, if the content in the hard disc is 
backed up in another recording medium before it is 
moved and the data thus backed up is restored to 
the hard disc after the move, the data having been 
moved will remain in the hard disc. 

(5) When a digital music data in a hard disc of a per- 
sonal computer is copied to an external apparatus 
such as portable device, it will possibly be passed 
to an illegal apparatus since it is not confirmed of 



2 

what type the external apparatus is. 

When a digital music data is passed from an 
external apparatus such as portable device to a 
personal computer, it will possibly be passed to an 

5 illegal software since it is not confirmed of what type 

the software controlling the personal computer is. 
(6) When a music data reproduced from a CD is 
dealt with in a personal computer, ISRC (Interna- 
tional Standard Recording Code) included in the 

io music data can be used to judge whether one 
music piece is the same as the other. However, no 
ISRC data is included in the CD as the case may 
be. In this case, it is not possible to judge whether 
the music pieces are the same as each other. 

15 (7) The above functions can be performed under 
the control of a software in a personal computer. 
So, if the software itself is altered, an operation not 
intended by the system designer will possibly be 
done. 

20 

Disclosure of the Invention 

[0004] Accordingly the present invention has an 
object to overcome the above-mentioned drawbacks of 

25 the prior art by providing an information processing 
apparatus and method adapted to positively prevent 
data from being fraudulently copied in a large volume by 
analyzing and falsifying a software used with the data, 
and a program storage medium having recorded therein 

30 the information processing program. 

[0005] An information processing apparatus 
according to the present invention comprises means for 
storing content data, a controlling means having a soft- 
ware which controls storage or read of the content data 

35 into or from the content data storage means and means 
provided in a hardware independent of the controlling 
means to decrypt and execute an encrypted program 
supplied from the controlling means and supply the 
result of the program execution to the controlling 

40 means; the controlling means controlling the content 
data storage or read to or from the content data storage 
means based on the program execution result supplied 
from the program executing means. In the information 
processing apparatus, the content data storage means 

45 stores also management information with which the 
content data stored in itself is managed, and the control- 
ling means makes the program executing means exe- 
cute a predetermined computation based on the 
management information. Also, the controlling means 

50 may be a CPU, the content data storing means may be 
a hard disc, and the program executing means may be 
a CPU incorporated in a semiconductor IC other than a 
one in which the CPU as the controlling means is built. 
[0006] Also, the above object can be attained by 

55 providing an information processing method including, 
according to the present invention, a step of controlling 
storage or read of content data into or from content data 
storage means based on a result of a program execu- 
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tion by a program executing means. 
[0007] Also, the above object can be attained by 
providing a program storage medium having recorded 
therein a program including, according to the present 
invention, a step of controlling storage or read of content 
data into or from a content data storing means based on 
a result of a program execution by a program executing 
means. 

[0008] Also the above object can be attained by 
providing an information processing apparatus includ- 
ing, according to the present invention, means for input- 
ting content data, means for storing the content data 
supplied from the input means, means for compressing 
the content data stored in the content data storing 
means in a predetermined manner, means for encrypt- 
ing the data stored in the content data storing means in 
a predetermined manner, and means for controlling 
storage or read, into or from the content data storing 
means, of the content data compressed by the com- 
pressing means and encrypted by the encrypted 
means. 

[0009] Also the above object can be attained by 
providing an information processing method including, 
according to the present invention, steps of inputting 
data, storing the data supplied from the data input step, 
compressing the data stored at the data storing step in 
a predetermined manner, encrypting the data stored at 
the data storing step in a predetermined manner, and 
controlling storage or read of the data compressed at 
the compressing step and encrypted at the encrypting 
step. 

[0010] Also, the above object can be attained by 
providing a program storage medium having recorded 
therein a program intended for execution by an informa- 
tion processing apparatus and readable by a computer, 
the program including, according to the present inven- 
tion, steps of inputting data, storing the data supplied 
from the data input step, compressing the data stored at 
the data storing step in a predetermined manner, 
encrypting the data stored at the data storing step in a 
predetermined manner, and controlling storage or read 
of the data compressed at the compressing step and 
encrypted at the encrypting step. 
[0011] Also, the above object can be attained by 
providing an information processing apparatus includ- 
ing, according to the present invention, means for input- 
ting content data, means for storing the content data 
supplied from the content data input means, means for 
holding management information for the content data 
stored in the content data storing means, means for 
making a predetermined computation based on the 
management information held in the management infor- 
mation holding means, and means for controlling the 
usage of the content data stored in the content data 
storing means according to a result of a comparison 
made between the result of the computation made by 
the computing means and that of a past computation 
which is stored in the content data storing means. 



[0012] Also, the above object can be attained by 
providing an information processing method including, 
according to the present invention, the steps of inputting 
data, storing the data supplied from the data input step, 

5 holding management information for the data stored at 
the data storing step, making a predetermined compu- 
tation based on the management information held at the 
management information holding step, storing the result 
of the computation made at the computing step, and 

70 controlling the usage of the data stored at the data stor- 
ing step according to a result of a comparison made 
between the result of the computation made at the com- 
puting step and that of a past computation stored at the 
data storing step. 

15 [0013] Also, the above object can be attained by 
providing a program storage medium having recorded 
therein a program intended for execution by an informa- 
tion processing apparatus and readable by a computer, 
the program including, according to the present inven- 

20 tion, the steps of inputting data, storing the data sup- 
plied from the data input step, holding management 
information for the data stored at the data storing step, 
making a predetermined computation based on the 
management information held at the management infor- 
ms mation holding step, storing the result of the computa- 
tion made at the computing step, and controlling the 
usage of the data stored at the data storing step accord- 
ing to a result of a comparison made between the result 
of the computation made at the computing step and that 

30 of a past computation stored at the data storing step. 
[0014] Also, the above object can be attained by 
providing an information processing apparatus includ- 
ing, according to the present invention, means for trans- 
mitting and receiving data to and from other apparatus, 

35 means for holding a predetermined lock key and save 
key, authenticating means which uses the lock key held 
in the holding means when transmitting and receiving 
data to and from the other apparatus to make a mutual 
authentication with the other apparatus to generate a 

40 communication key, means for encrypting the communi- 
cation key with the save key, and means for storing the 
data received by the data transmitting and receiving 
means and having been encrypted with the communica- 
tion key correspondingly to the communication key 

45 encrypted by the encrypting means. 

[0015] Also, the above object can be attained by 
providing an information processing method including, 
according to the present invention, the steps of transmit- 
ting and receiving data to and from other apparatus, 

so holding a predetermined lock key and save key, using 
the lock key held at the holding step when transmitting 
and receiving data to and from the other apparatus to 
make a mutual authentication with the other apparatus 
to generate a communication key, encrypting the com- 

55 munication key with the save key, and storing the data 
received at the data transmitting and receiving step and 
having been encrypted with the communication key cor- 
respondingly to the communication key encrypted at the 
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encrypting step. 

[0016] Also, the above object can be attained by 
providing a program storage medium having recorded 
therein a program intended for execution by an informa- 
tion processing apparatus and readable by a computer, 5 
the program including, according to the present inven- 
tion, the steps of transmitting and receiving data to and 
from other apparatus, holding a predetermined lock key 
and save key, using the lock key held at the holding step 
when transmitting and receiving data to and from the 10 
other apparatus to make a mutual authentication with 
the other apparatus to generate a communication key, 
encrypting the communication key with the save key, 
and storing the data received at the data transmitting 
and receiving step and having been encrypted with the is 
communication key correspondingly to the communica- 
tion key encrypted at the encrypting step. 
[0017] Also, the above object can be attained by 
providing an information processing apparatus includ- 
ing according to the present invention means for storing 20 
data, means for holding the usage rule for the data 
stored in the data storing means, means for judging 
whether or not, when moving the data stored in the data 
storing means to other apparatus, the usage rule for the 
data stored in the data storing means is reproducible by 25 
the other apparatus, and means for moving, based on 
the result of the judgment by the judging means, the 
data stored in the data storing means to the other appa- 
ratus along with the usage rule for the data stored in the 
data storing means, which is held in the holding means. 30 
[0018] Also, the above object can be attained by 
providing an information processing method including, 
according to the present invention, the steps of storing 
data, holding the usage rule for the data stored at the 
data storing step, judging whether or not, when moving 35 
the data stored at the data storing step to other appara- 
tus, the usage rule for the data stored at the data storing 
is reproducible by the other apparatus, and moving, 
based on the result of the judgment at the judging step, 
the data stored in the data storing means to the other 40 
apparatus along with the usage rule for the data stored 
at the data storing step, which is held at the holding 
step. 

[0019] Also, the above object can be attained by 
providing a program storage medium having recorded 45 
therein a program intended for execution by an informa- 
tion processing apparatus and readable by a computer, 
the program including, according to the present inven- 
tion, the steps of storing data, holding the usage rule for 
the data stored at the data storing step, judging whether so 
or not, when moving the data stored at the data storing 
step to other apparatus, the usage rule for the data 
stored at the data storing step is reproducible by the 
other apparatus, and moving, based on the result of the 
judgment at the judging step, the data stored in the data 55 
storing means to the other apparatus along with the 
usage rule for the data stored at the data storing step, 
which is held at the holding step. 



Brief Description of the Drawings 
[0020] 

FIG. 1 shows an embodiment of a content data 
management system according to the present 
invention. 

FIG. 2 explains the configuration of a personal com- 
puter used in the content data management sys- 
tem. 

FIG. 3 explains the configuration of a portable 
device included in the content data management 
system. 

FIG. 4 is a block diagram of the personal computer 
for explanation of the functions of the personal com- 
puter. 

FIG. 5 shows an example of display/ope ratio n- 
instructive window. 

FIG. 6 shows an example of the window which the 
recording program makes the display unit display. 
FIG. 7 is a flow chart of operations effected in cop- 
ying a content from a compact disc to an HDD. 
FIG. 8 is a flow chart of operations effected in 
checking the time limit data base at step S12 in the 
flow chart shown in FIG. 7. 

FIG. 9 shows an example of the time limit data 
base. 

FIG. 10 explains a water mark. 
FIG. 11 shows aan example of music data base. 
FIG. 12 is a flow chart of operations effected in 
moving a content from the HDD to portable device. 
FIG. 13 is a flow chart of operations effected in 
moving a content from the HDD to potable device. 
FIG. 14 is a flow chart of operations effected in 
moving a content from the HDD to portable device. 
FIG. 15 is a flow chart of operations effected in 
checking conditions for playback of a selected con- 
tent at step S55 in the flow chart shown in FIG. 12. 
FIG. 16 explains the playback conditions managed 
by the portable device. 

FIG. 17 is a flow chart of operations effected in for- 
mat conversion at step S58 in the flow chart in FIG. 
12. 

FIG. 1 8 is a flow chart of operations effected in cop- 
ying a content from the HDD to portable device. 
FIG. 1 9 is a flow chart of operations effected in cop- 
ying a content from the HDD to portable device. 
FIG. 20 is a flow chart of operations effected in cop- 
ying a content from the HDD to portable device. 
FIG. 21 is a flow chart of operations effected in cop- 
ying a content from the portable device to HDD. 
FIG. 22 is a flow chart of operations effected in cop- 
ying a content from the portable device to HDD. 
FIG. 23 is a flow chart of operations effected in cop- 
ying a content from an EMD server to HDD. 
FIG. 24 is a flow chart of operations effected in 
accounting at step S204 in the flow chart shown in 
FIG. 23. 
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FIG. 25 explains a accounting log. 
FIG. 26 is a flow chart of operations effected In cop- 
ying a content to the HDD from an IEC60958 termi- 
nal of the personal computer. 
FIG. 27 is a flow chart of operations effected in cop- 
ying a content to the HDD from an IEC60958 termi- 
nal of the personal computer. 
FIG. 28 is a flow chart of operations effected in out- 
putting a content from the HDD to the IEC60958 
terminal. 

FIG. 29 is a flow chart of operations effected in out- 
putting a content from the HDD to the IEC60958 
terminal. 

FIG. 30 is a flow chart of operations in checking 
playback conditions at step S275 in the flow chart 
shown in FIG. 28. 

FIG. 31 is a flow chart of operations effected in out- 
putting a content from the HDD via the portable 
device. 

FIG. 32 is a flow chart of operations effected in out- 
putting a content from the HDD via the portable 
device. 

FIG. 33 explains the function of a nonvolatile mem- 
ory. 

FIG. 34 is a flow chart of operations of the adaptor. 
FIG. 35 shows the internal construction of the 
adaptor. 

FIGS. 36A and 36B show examples, respectively, of 
the internal construction of the nonvolatile memory. 
FIG. 37 shows an example of the internal construc- 
tion of the nonvolatile memory. 

Best Mode for Carrying Out the Invention 

[0021] The best mode for carrying out the present 
invention will be described in further detail herebelow 
with reference to the accompanying drawings. 
[0022] FIG. 1 shows an embodiment of the content 
data management system according to the present 
invention. The content data management system 
includes a personal computer 1 connected to a network 
2 composed of a local area network or Internet. The 
personal computer 1 compresses a music data (will be 
referred to as "content" hereinafter) received from EMD 
(Electrical Music Distribution) servers 4-1 to 4-3 or read 
from a CD (Compact Disc) which will further be 
described later in a predetermined manner (ATRAC3 
(trademark) for example), and encrypts the compressed 
content, for recording, by an encrypting method such as 
DES (Data Encryption Standard) or the like. 
[0023] The personal computer 1 records also, for an 
encrypted and recorded content, a usage rule accord- 
ing to which th content is to be used. 
[0024] The usage rule shows, for example, a 
number of portable devices (abbreviated as "PD" as the 
case may be) which can simultaneously use the content 
following the usage rule. The number of PDs referred to 
herein is a number of PDs which can check out the con- 



tent as will further described later. Even after a number 
of contents included in the usage rule has been 
checked out, the personal computer 1 can play back the 
content. 

5 [0025] Otherwise, the usage rule may show that the 
content can be copied. When the content is copied to 
portable devices 6-1 to 6-3, the personal computer 1 
can play back the recorded content. The content can be 
stored into the portable devices 6-1 to 6-3 a number of 

w times which is limited as the case may be. In this case, 
the content can be copied a number of times which will 
not be increased. 

[0026] Alternatively, the usage rule may show that 
the content can be moved to other personal computer. 
15 After the content is moved to the portable devices 6-1 to 
6-3, the content recorded in the personal computer 1 
cannot be used (the content is deleted or the usage rule 
are changed). 

[0027] The usage rule will be described in detail 
20 later. 

[0028] The personal computer 1 will store the 
encrypted and recorded content along with the content- 
related data (e.g., title of, or playback condition for, each 
music piece) into the connected portable device 6-1 via 

25 a USB (Universal Serial Bus) cable 7-1 , and update the 
usage rule for the stored content in response to the con- 
tent storage into the portable device 6-1 (which opera- 
tions will be referred to as "check-out" hereinafter). 
More specifically, when the content is checked out, the 

30 number of times a content can be checked out, included 
in the usage rule for the content and recorded in the per- 
sonal computer 1, is decreased by one. Therefore, 
when the number of times a content can be checked out 
becomes zero, the content following the usage rule can- 

35 not be checked out any longer. 

[0029] Also, the personal computer 1 will store the 
encrypted and recorded content along with the content- 
related data into the connected portable device 6-2 via 
a USB cable 7-2, and update the usage rule for the 

40 stored content in response to the content storage into 
the portable device 6-2. Further, the personal computer 
1 will store the encrypted and recorded content along 
with the content-related data into the connected porta- 
ble device 6-3 via a USB (Universal Serial Bus) cable 7- 

45 3, and update the usage rule for the stored content in 
response to the content storage into the portable device 
6-3. 

[0030] Also, the computer 1 will make the portable 
device 6-1 connected thereto by the USB cable 7-1 

so delete, or disable the portable device 6-1 to use, the 
content the personal computer 1 has checked out, 
thereby updating the usage rule for the deleted content 
(which operation will be referred to as "check-in" herein- 
after). More specifically, when the content has been 

55 checked in, the number of times a content can be 
checked out, included in the usage rule for the content 
and recorded in the personal computer 1, is increased 
by one. 
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[0031] Also, the computer 1 will make the portable 
device 6-2 connected thereto by the USB cable 7-2 
delete, or disable the portable device 6-2 to use, the 
content the personal computer 1 has checked out, 
thereby updating the usage rule for the deleted content. 
Further, the computer 1 will make the portable device 6- 
3 connected thereto by the USB cable 7-3 delete, or dis- 
able the portable device 6-3 to use, the content the per- 
sonal computer 1 has checked out, thereby updating the 
usage rule for the deleted content. 
[0032] The personal computer 1 cannot check in a 
content which other personal computer (not shown) has 
checked out to the portable device 6-1 . Also, The per- 
sonal computer 1 cannot check in a content which the 
other personal computer has checked out to the porta- 
ble device 6-2. Further, the personal computer 1 cannot 
check in a content which the other personal computer 
has checked out to the portable device 6-3. 
[0033] As shown, the content data management 
system according to the present invention includes also 
an EMD registration server 3. When the personal com- 
puter 1 starts acquiring the content from the EMD serv- 
ers 4-1 to 4-3, the EMD registration server 3 responds 
to a request from the personal computer 1 to transmit to 
the personal computer 1 via the network 2 an authenti- 
cate key necessary for mutual authentication between 
the personal computer 1 and EMD servers 4-1 to 4-3, 
and to the personal computer 1 a program for connec- 
tion to the EMD servers 4-1 to 4-3. 
[0034] In response to the request from the personal 
computer 1, the EMD server 4-1 will supply a content 
along with a content-related data (e.g., title or playback 
limit of each music piece) to the personal computer 1 via 
the network 2. Also, the EMD server 4-2 will respond to 
the request from the personal computer 1 to supply a 
content along with a content- related data to the per- 
sonal computer 1 via the network 2. Further, in 
response to the request from the personal computer 1 , 
the EMD server 4-3 will supply a content along with a 
content-related data to the personal computer 1 via the 
network 2. 

[0035] The contents supplied from the EMD servers 

4- 1 to 4-3 are compressed in the same manner or in dif- 
ferent manners, respectively. Also, the contents sup- 
plied from the EMD servers 4-1 to 4-3 are encrypted in 
the same manner or different manners, respectively. 
[0036] As shown, the content data management 
system according to the present invention includes also 
WWW (world-wide web) servers 5-1 and 5-2. The 
WWW server 5-1 responds to the request from the per- 
sonal computer 1 to supply the personal computer 1 via 
the network 2 with a CD from which a content has been 
read (e.g., CD album name or CD supplier) and data 
corresponding to the read content (e.g., title or com- 
poser's name of each music piece). In response to the 
request from the personal computer 1 , the WWW server 

5- 2 supplies the personal computer 1 via the network 2 
with a CD from which a content has been read and data 



corresponding to the read content. 
[0037] The portable device 6-1 stores the content 
supplied from the personal computer 1 (i.e., a checked- 
out content) along with data related with the content 
5 (e.g., title or playback limit of each music piece). Based 
on the content-related data, the portable device 6-1 will 
play back and output the stored content to a headphone 
or the like (not shown). 

[0038] For example, when it is tried to play back a 
10 content a larger number of times than a playback limit 
stored as the content- related data, the portable device 
6-1 will stop playback of the corresponding content. 
Also, when it is tried to play back after a playback time 
limit stored as the content-related data has passed, the 
15 portable device 6-1 will stop playback of the corre- 
sponding content. 

[0039] The user will be able to disconnect, for carry- 
ing, the portable device 6-1 having a content stored 
therein from the personal computer 1 , and play back the 
20 content stored in the portable device 6-1 for listening to 
a music piece corresponding to the content through the 
headphone or the like. 

[0040] The portable device 6-2 stores the content 
supplied from the personal computer 1 along with data 

25 related with the content. Based on the content-related 
data, the portable device 6-2 will play back and output 
the stored content to a headphone or the like (not 
shown). The user will be able to disconnect, for carry- 
ing, the portable device 6-2 having a content stored 

30 therein from the personal computer 1 , and play back the 
content stored in the portable device 6-2 for listening to 
a music piece corresponding to the content through the 
headphone or the like. 

[0041] The portable device 6-3 stores the content 

35 supplied from the personal computer 1 along with data 
related with the content Based on the content-related 
data, the portable device 6-3 will play back and output 
the stored content to a headphone or the like (not 
shown). The user will be able to disconnect, for carry- 

40 ing, the portable device 6-3 having a content stored 
therein from the personal computer 1 , and play back the 
content stored in the portable device 6-3 for listening to 
a music piece corresponding to the content through the 
headphone or the like. 

45 [0042] The portable devices 6-1 to 6-3 will be 
referred to simply as "portable device 6" hereafter wher- 
ever they may not be referred to individually. 
[0043] FIG. 2 is an explanatory illustration of the 
configuration of the personal computer 1 . As shown, the 

50 personal computer 1 comprises a CPU (central 
processing unit) 11. The CPU 11 actually executes a 
variety of applications (will further be described later) 
and OS (operating system). A ROM (read-only memory) 
1 2 is also provided in the personal computer 1 , and gen- 

55 erally stores basically fixed data of programs and com- 
putational parameters used in the CPU 1 1 . Also, a RAM 
(random-access memory) 13 is included in the personal 
computer 1 to store programs used for execution of the 
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applications and OS by the CPU 1 1 and parameters 
which are appropriately variable in the execution of the 
applications and OS. The CPU 11, ROM 12 and RAM 

1 3 are mutually connected to each other by a host bus 

14 composed of a CPU bus, etc. 

[0044] The host bus 14 is connected to an external 
bus 16 such as PCI (peripheral component intercon- 
nect/interface) by a bridge 15. 

[0045] The personal computer 1 is also provided 
with a keyboard 18 which is operated by the user to 
input various commands to the CPU 11, and with a 
mouse 1 9 which is used by the user to point and select 
a point on the screen of a display unit 20. The display 
unit 20 is a liquid crystal display or CRT (cathode-ray 
tube) to display a variety of information in the form of a 
text and/or image. Further, the personal computer 1 is 
provided with an HDD (hard disc drive) 21 which drives 
a hard disc to write or read a program to be executed by 
the CPU 1 1 and information to or from the hard disc. 
[0046] A drive 22 is also provided in the personal 
computer 1. The drive 22 reads data or program 
recorded in any of a magnetic disc 41 „ optical disc 42 
(including CD), magneto-optical disc 43 and semicon- 
ductor memory 44, whichever is connected to the drive 
22, and supplies the read data or program to the RAM 
13 connected thereto by an interface 17, external bus 
16, bridge 15 and host bus 14. 

[0047] The personal computer 1 is also provided 
with USB ports 23-1, 23-2 and 23-3. The USB port 23-1 
has the portable device 6-1 connected thereto by the 
USB cable 7-1 , and outputs data (including a content or 
a command to the portable device 6-1, for example) 
supplied from the HDD 21, CPU 11 or RAM 13 to the 
portable device 6-1 via the interface 17, external bus 1 6, 
bridge 15 or host bus 14. 

[0048] The USB port 23-2 has the portable device 
6-2 connected thereto by the USB cable 7-2, and out- 
puts data (including a content or a command to the port- 
able device 6-2, for example) supplied from the HDD 21 , 
CPU 11 or RAM 13 to the portable device 6-2 via the 
interface 17, external bus 16, bridge 15 or host bus 14. 
[0049] The USB port 23-3 has the portable device 
6-3 connected thereto by the USB cable 7-3, and out- 
puts data (including a content or a command to the port- 
able device 6-3, for example) supplied from the HDD 21 , 
CPU 11 or RAM 13 to the portable device 6-3 via the 
interface 17, external bus 16, bridge 15 or host bus 14. 
[0050] The personal computer 1 is also provided 
with an audio input/output interface 24 having an I EC 
(International Electrotechnical Commission) 60958 ter- 
minal 24a. The audio input/output interface 24 inter- 
faces a digital audio input/output or an analog audio 
input/output. The personal computer 1 has also a 
speaker 45 which provides a predetermined sound cor- 
responding to each content based on an audio signal 
supplied from the audio input/output interface 24. 
[0051] The accessories including the keyboard 18 
to audio input/output interface 24 are connected to the 



interface 17 which in turn is connected to th CPU 1 1 by 
the external bus 16, bridge 15 and host bus 14. 
[0052] Further, the personal computer 1 has a com- 
munications block 25 connected to the network 2. The 

5 communications block 25 transmits, as stored in pack- 
ets in a predetermined manner, data (e.g., request for 
registration or request for sending a content) supplied 
from the CPU 1 1 or HDD 21 via the network 2 while out- 
putting data (e.g., authenticate key or content) stored in 

10 received packets to the CPU 1 1 , RAM 1 3 or HDD 21 via 
the network 2. 

[0053] An adaptor 26 formed integrally as a semi- 
conductor IC is also provided for connection to the per- 
sonal computer 1 . It has a CPU 32, RAM 33, nonvolatile 

15 memory 34, RTC (real-time clock) 35 and a ROM 36. 
The CPU 32 is connected to the CPU 1 1 in the personal 
computer 1 by the external bus 16, bridge 15 and host 
bus 14 and thus cooperates with the CPU 11 to effect 
various processes. The RAM 33 stores data and pro- 

20 grams necessary for execution of the various processes 
by the CPU 32. The nonvolatile memory 34 stores data 
which have to be held still after the personal computer 1 
is turned off. The ROM 36 stores a program for decryp- 
tion of an encrypted program transferred from the per- 

25 sonal computer 1. The RTC 35 keeps time to provide 
time information. 

[0054] The communications block 25 and adaptor 
26 are connected to the CPU 1 1 by the external bus 1 6, 
bridge 15 and host bus 14. 

30 [0055] The USB ports 23-1 to 23-3 will be referred 
to simply as "USB port 23" hereafter wherever they 
have not to be referred to individually. Also, the USB 
cables 7-1 to 7-3 will be referred to simply as "USB 
cable T hereafter wherever they have not to be referred 

35 to individually. 

[0056] Referring now to FIG. 3, the portable device 
6 is schematically illustrated in the form of a block dia- 
gram. The portable device 6 includes a power circuit 52 
which converts a voltage supplied from a dry cell 51 to 

40 an internal power of a predetermined voltage. Supplying 
the power to components from a CPU 53 to display unit 
67, the power circuit 52 will thus drive the entire portable 
device 6. 

[0057] A USB controller 57 is provided in the porta- 
45 ble device 6. When connected to the personal computer 
1 by a USB connector 56 and USB cable 7, the USB 
controller 57 will supply data including a content trans- 
ferred from the personal computer 1 to the CPU 53 via 
an internal bus 58. 
so [0058] A data to be transferred from the personal 
computer 1 is composed of data of 64 bytes per packet, 
and transferred from the personal computer 1 at a trans- 
fer rate of 12 M bits/sec. 

[0059] A data to be transferred to the portable 
55 device 6 is composed of a header and content. The 
header stores a content ID, file name, header size, con- 
tent key, file size, codec ID, file information, etc. and also 
a playback limitation data, start date, end date, playback 
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limit, playback counter, etc., necessary for the playback 
limitation. It should be noted here that the term "date" 
used herein refers to a date and time. The content is 
coded by the encoding method such as ATRAC3 and 
encrypted. 5 
[0060] The header size indicates a data length of a 
header (e.g., 33 bytes), and the file size indicates a data 
length of the content (e.g., 33,636,138 bytes). 
[0061] The content key is a key for decryption of an 
encrypted content, and transmitted from the personal io 
computer 1 to the portable device 6 in a format 
encrypted based on a session key (provisional) gener- 
ated via a mutual authentication between the personal 
computer 1 and portable device 6. 

[0062] When the portable device 6 is connected to 15 
the USB port 23 of the personal computer 1 by the USB 
cable 7, there will be made a mutual authentication 
between the portable device 6 and personal computer 
1 . This mutual authentication is of a challenge-response 
type for example. Note that a DSP (digital signal proces- 20 
sor) 59 is also provided in the portable device 6 to 
decrypt an encrypted content when the challenge- 
response type authentication is done. 
[0063] The above-mentioned challenge-response 
type mutual authentication is such that in response to a 25 
certain value (challenge) generated by the personal 
computer, for example, there is generated a value 
(response) by the portable device 6 by using a private 
key common to both the portable device 6 and personal 
computer 1. In the challenge-response type mutual 30 
authentication, the value generated by the personal 
computer 1 varies at every authentication. So, even 
when for example a value generated using the private 
key and outputted from the portable device 6 is read, 
that is, a so-called disguised attack takes place, the per- 35 
sonal computer 1 can detect a f raudulence since a next 
mutual authentication is done using a different value. 
[0064] The content ID is an ID for a content to iden- 
tify the content. 

[0065] The codec ID is an ID corresponding to an 40 
encoding method for a content. For example, a codec ID 
of "1" corresponds to ATRAC3 while a codec ID of "0" 
corresponds to MP3 (MPEG (Moving Picture Experts 
Group) Audio Layer-3). 

[0066] The file name is a data resulted from conver- 45 
sion of a content file (will further be described later) cor- 
responding to a content and recorded in the personal 
computer 1 to an ASCII (American National Standard 
Code for Information Interchange) code. The file infor- 
mation is a data resulted from conversion of a music 50 
piece title (content name), name of the artist playing the 
music piece, name of the songwriter of the music piece 
or name of the composer of the music piece to an ASCII 
code. 

[0067] The playback limitation data is to indicate 55 
whether there is set a playback period for which a con- 
tent can be played back (i.e., start date or end date) or 
a playback limit (a limited number of times) a content 



can be played back. When a playback limit is set, the 
playback limitation data is assigned "1". When a period 
for which a content can be played back is set, the play- 
back limitation data is assigned "2". When there is nei- 
ther a playback limit nor a playback period (namely, 
when the content is purchased), the playback limitation 
data is assigned "0". 

[0068] The start date and end date are data indicat- 
ing a range of a period for which a content can be 
played back when the playback limitation data is 
assigned "2". For example, when the start date is 
"00040F" while the end date is "00070F", a correspond- 
ing content can be played back for a period from April 
15, 2000 until July 15, 2000. 

[0069] Similarly, the playback limit and playback 
counter are as follows. Namely, when the playback limi- 
tation data is assigned "1 " or "2", the playback limit is a 
predetermined number of times a content can be played 
back, and the playback counter is a number of times the 
content has been played back and which is updated by 
the CPU 53 upon completion of that playback. For 
example, when the playback limit is "02", the content 
can be played back two times. When the playback coun- 
ter is "01 it means that the content has been played 
back once. 

[0070] When the playback limitation data is 
assigned "2", the start date is "00040F", end date is 
"00070F" and the playback limit is "02", for example, the 
portable device 6 will be permitted to play back a corre- 
sponding content twice a day for a period from April 15, 
2000 until July 15, 2000. 

[0071] Also, when the playback limitation data is 
assigned "1", start date is "000000", end date is 
"000000", playback limit is "0" and playback counter is 
"05", for example, a corresponding content can be 
played back for an unlimited period, can be played back 
1 0 times, and has been played back 5 times. 
[0072] When the portable device 6 receives a con- 
tent and a content write command from the personal 
computer 1, the CPU 53 which executes a main pro- 
gram read from a ROM 55 to RAM 54, will receive the 
write command, control a flash memory controller 60 
and write to a flash memory 61 the content received 
from the personal computer 1 . 

[0073] The flash memory 61 has a storage capacity 
of about 64 Mbytes to store the content. Also, the flash 
memory has stored therein in advance a playback code 
for expansion of a content having been compressed in a 
predetermined manner. 

[0074] Note that the flash memory 61 may be 
formed as a memory card which is connectable to, and 
removable from, the portable device 6. 
[0075] When the CPU 53 is supplied with a play- 
back command corresponding to a push-down opera- 
tion of a play/stop button (not shown) via an operation 
key controller 62, it will make the flash memory control- 
ler 60 read the playback code and content from the flash 
memory 61 and transfer them to the DSP 59 of the port- 
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able device 6. 

[0076] After detecting error in the content in the 
CRC (cyclic redundancy check) method according to 
the playback code transferred from the flash memory 
61, the DSP 59 will play back the content and the 
played-back data (indicated with a reference D1 in FIG. 
3) to a digital/analog conversion circuit 63. 
[0077] The DSP 59 is formed integrally with a trans- 
mission circuit (not shown) provided inside the portable 
device 6 to play back a content based on a master clock 
MCLK from an external crystal oscillator 59A, and sup- 
plies the digital/analog conversion circuit 63 with the 
master clock MCLK, a bit clock BCLK generated by an 
internal oscillation circuit based on the master clock 
MCLK and having a predetermined frequency, and an 
operating clock LRCLK composed of an L-channel clock 
LCLK and R-channel clock RCLK in the units of frames. 
[0078] For playing back a content, the DSP 59 will 
supply the above-mentioned operating clock to the dig- 
ital/analog conversion circuit 63 according to the play- 
back code. When playing back no content, the DSP 59 
will stop supplying the operating clock according to the 
playback code to turn off the digital/analog conversion 
circuit 63, thereby reducing the power consumption of 
the entire portable device 6. 

[0079] Similarly, the CPU 53 and USB controller 57 
have external crystal oscillators 53 A and 57A con- 
nected thereto, respectively, and effect predetermined 
operations on the basis of master clocks MCLK sup- 
plied from the oscillators 53 A and 57A, respectively. 
[0080] Because of the above-mentioned construc- 
tion, the portable device 6 needs no clock generation 
module to supply a clock to each of the CPU 53, DSP 59 
and USB controller 57 and thus can be designed to 
have a simpler and more compact circuit construction. 
[0081] The digital/analog conversion circuit 63 con- 
verts a played-back content to an analog audio signal 
and supplies it to an amplification circuit 64. The ampli- 
fication circuit 64 amplifies the audio signal and supplies 
it to headphone (not shown) via a headphone jack 65. 
[0082] Thus, when the play/stop button (not shown) 
is pressed, the portable device 6 plays back a content 
stored in the flash memory 61 under the control of the 
CPU 53. When the play/stop button is pressed in the 
course of playing back a content, the portable device 6 
will stop playing back the content. 
[0083] When the play/stop button is pressed after 
stopping the content playback operation, the portable 
device 6 will resume the content playback at the position 
where the playback operation has been stopped under 
the control of the CPU 53. When a time of a few sec- 
onds has passed with no additional operation effected 
after the playback operation is stopped by pressing the 
play/stop button, the portable device 6 will automatically 
shut off the power supply, thereby reducing the power 
consumption. 

[0084] It should be noted here that when the 
play/stop button is pressed after the power supply is 
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turned off, the portable device 6 will resume the play- 
back at the first music piece or music piece No. 1 with- 
out playing back the content at the position where the 
playback operation has previously been stopped. 

5 [0085] Also, the CPU 53 of the portable device 6 
makes an LCD controller 68 display on a display unit 67 
a playback mode (e.g., repeated play, introducing play, 
etc), equalization adjustment (i.e., gain adjustment for a 
frequency band of the audio signal), number for music 

w piece, playing time, operation modes such as play, stop, 
fast forward and fast rewind, and information such as 
sound volume and voltage level in the dry cell 51 . 
[0086] Further, the portable device 6 stores into an 
EEPROM 68 a number of contents written in a flash 

75 memory 80, locations of blocks of the flash memory 61 
in which contents are written, respectively, and a so- 
called FAT (file allocation table) for various information 
stored in the memory. 

[0087] It should be noted that in this embodiment, a 
20 content is taken as one block of 64 kbytes and a location 
of the block for the content of each music piece is stored 
in the FAT. 

[0088] In case a FAT is stored into the flash memory 
61 , when the content of a first music piece is written into 

25 the flash memory 61 under the control of the CPU 53, 
the location of a block corresponding to the content of 
the first music piece will be written as FAT into the flash 
memory, and then when the content of a second music 
piece is written into the flash memory 61 , the location of 

30 a block corresponding to the content of the second 
music piece will be written as FAT into the flash memory 
61 (in the same area as that in which the first music 
piece has already been written). 

[0089] In this way, a FAT is rewritten each time the 
35 content is written into the flash memory 61 and further 
the same data will be written again for reservation to 
protect the data. 

[0090] When FAT is written into the flash memory 
61, the same area in the flash memory will be rewritten 

40 twice correspondingly to the write of the first content. 
For this reason, when content write has been made a 
small number of times, a specified number of times for 
rewrite of the flash memory 61 will be reached, so that 
the flash memory 61 will not be rewritable any longer. 

45 [0091] To avoid the above, the portable device 6 
makes the EEPROM 68 store FAT so that FAT will be 
rewritten a reduced number of times in the flash mem- 
ory 61 at write of each content. 

[0092] By storing into the EEPROM 68 a FAT which 
so is rewritten a large number of times, the portable device 
6 can be adapted such that content can be written into 
the flash memory 61 at a frequency tens times larger 
than that at which FAT is stored into the flash memory 
61. Further, since the CPU 53 makes the EEPROM 68 
55 additionally store FAT, the same area in the EEPROM 
68 is rewritten at a reduced frequency to prevent the 
EEPROM 68 from early becoming not rewritable. 
[0093] When the portable device 6 is connected to 
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the personal computer 1 by the USB cable 7 (which will 
be referred to as "USB connection" hereinafter), it is 
recognized based on an interrupt signal supplied from 
the USB controller 57 to the CPU 53 that the USB con- 
nection has been made. 

[0094] When the portable device 6 recognizes the 
USB connection, it is supplied with an external power of 
a specified current value from the personal computer 1 
via the USB cable 7, and makes a power circuit 52 stop 
the power supply from the dry cell 51 . 
[0095] When the USB connection is established, 
the CPU 53 will stop the DSP 59 from playing back a 
content. Thus, the CPU 53 will prevent the external 
power supplied from the personal computer 1 from 
exceeding the specified current value so that the exter- 
nal power of the specified current value can always be 
supplied. 

[0096] Thus, when the USB connection is estab- 
lished, the CPU 53 makes a selection between the 
power supplied from the dry cell 51 and the power sup- 
plied from the personal computer 1. That is, the inex- 
pensive external power from the personal computer 1 
can be used, and so the costly power supplied from the 
dry cell 51 and which costs high is less consumed. 
Thus, the dry cell 51 can be used for a longer service 
life. 

[0097] Note that when supplied with the external 
power from the personal computer 1 via the USB cable 
7, the CPU 53 stops the DSP 59 from playing back a 
content to reduce the radiation from the DSP 59, so that 
the radiation of the entire system including the personal 
computer 1 can further be reduced. 
[0098] Referring now to FIG. 4, there is illustrated a 
block diagram of the personal computer 1, explaining 
the functions of the personal computer 1 , implemented 
by execution of predetermined programs by the CPU 

I I. As shown, the personal computer 1 uses a content 
management program 1 1 1 which is composed of a plu- 
rality of programs including an EMD selection program 
131, check-in/check-out management program 132, 
copy management program 133, move management 
program 134, encryption method conversion program 
135, compression method conversion program 136, 
encryption program 137, compression/expansion pro- 
gram 138, usage rule conversion program 139, usage 
rule management program 140, authentication program 
141, decryption program 142, PD driver 143, purchase 
programs 144 and 145. 

[0099] Of the above programs, the content man- 
agement program 111 is composed of shuffled or 
encrypted instructions, for example, to conceal the 
instructed operations from outside to make it difficult to 
interpret the instructions (for example, even if the user 
can read directly the content management program 

I I I , he or she cannot identify, the instructions. 
[0100] The EMD selection program 131 is not 
included in the content management program 1 1 1 when 
the latter is installed in the personal computer 1 but it is 



received from the EMD registration server 3 via the net- 
work 2 at the time of EMD registration which will further 
be described later. The EMD selection program 131 
selects a connection with any of the EMD servers 4-1 to 
5 4-3 to enable a purchase application program 1 15, pur- 
chase program 144 or 142 to have a communication 
with any of the EMD servers 4-1 to 4-3 (e.g., download 
of a content for purchase). 

[0101] Based on a setting of either check-in or 

10 check-out and usage rule files 162-1 to 162-N recorded 
in a content data base 1 1 4, the check-in/check-out 
management program 1 32 checks out contents stored 
in content files 161-1 to 161-N to any of the portable 
devices 6-1 to 6-3, or checks in contents stored in the 

15 portable devices 6-1 to 6-3. 

[0102] In response to the check-in or check-out 
having been done, the check-in/check-out management 
program 1 32 updates the usage rule stored in the usage 
rule files 162-1 to 162-N recorded in the content data 

20 base 1 1 4. 

[01 03] Based on the usage rule files 1 62-1 to 1 62-N 
recorded in the content data base 114, the copy man- 
agement program 133 copies contents stored in the 
content files 161-1 to 161-N to any of the portable 

25 devices 6-1 to 6-3, or copies contents from the portable 
devices 6-1 to 6-3 to the content data base 1 1 4. 
[0104] Also based on the usage rule files 162-1 to 
1 62-N recorded in the content data base 1 1 4, the move 
management program 1 34 moves contents stored in the 

30 content files 161-1 to 161-N to any of the portable 
devices 6-1 to 6-3, or contents from the portable 
devices 6-1 to 6-3 to the content data base 114. 
[0105] The encryption method conversion program 
135 converts, to the same encryption method as that 

35 used with the contents stored in the content files 161-1 
to 161-N recorded in the content data base 114, the 
encryption method used with a content the purchase 
application program 115 receives from the EMD server 
4-1 via the network 2, a content the purchase program 

40 1 44 receives from the EMD server 4-2 via the network 3 
or a content the purchase program 145 receives from 
the EMD server 4-3 via the network 2. 
[0106] In addition, to check out a content to the 
portable device 6-1 or 6-3, the encryption method con- 

45 version program 135 converts the encryption method 
used with the content to be checked out to a one used 
in the portable device 6-1 or 6-3. 

[0107] The compression method conversion pro- 
gram 136 converts, to the same compression method 

50 as that used with the contents stored in the content files 
161-1 to 161-N recorded in the content data base 114, 
the compression method used with a content the pur- 
chase application program 115 receives from the EMD 
server 4-1 via the network 2, a content the purchase 

55 program 144 receives from the EMD server 4-2 via the 
network 2 or a content the purchase program 145 
receives from the EMD server 4-3 via the network 2. 
[0108] Also, to check out a content to the portable 
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device 6-1 or 6-3, the compression method conversion 
program 136 converts the compression method used 
with the content to be checked out to a one used in the 
portable device 6-1 or 6-3. 

[0109] The encryption program 137 is used to 5 
encrypt a content (not encrypted) read from a CD and 
supplied from a recording program 113 for example to 
the same encryption method as that used with contents 
stored in the content files 161-1 to 161 -N recorded in 
the content data base 114. w 
[0110] The compression/expansion program 138 
encodes a content (not compressed) read from a CD 
and supplied from the recording program 113 by the 
same encoding method as that used with contents 
stored in the content files 161-1 to 161-N recorded in 15 
the content data base 114. In addition, the compres- 
sion/expansion program 138 will expand (decrypt) a 
coded content. 

[0111] The usage rule conversion program 139 
converts, to the same format as that of the usage rule 20 
stored in the usage rule files 162-1 to 1 62-N recorded in 
the content data base 114, a usage rule for a content 
the purchase application program 1 1 5 receives from the 
EMD server 4-1 via the network 2, a content the pur- 
chase program 144 receives from the EMD sever 4-2 25 
via the network 2, or a content the purchase program 
145 receives from the EMD server 4-3 via the network. 
[0112] Also, to check out a content to the portable 
device 6-1 or 6-3, the usage rule conversion program 
139 converts the usage rule for the content to be 30 
checked out to a one used in the portable device 6-1 or 
6-3. 

[0113] Before execution of content copy, move, 
check-in or check-out, the usage rule management pro- 
gram 140 detects a falsification or alteration of the 35 
usage rules based on hash values (which will further be 
described later) meeting the usage rules stored in the 
usage rule files 162-1 to 162-N recorded in the content 
data base 114. As the usage rules stored in the usage 
rule files 162-1 to 162-N recorded in the content data 40 
base 1 14 are updated along with a content copy, move, 
check-in or check-out, the usage rule management pro- 
gram 140 updates the hash values meeting the usage 
rules. 

[0114] The authentication program 141 executes a 45 
mutual authentication between the content manage- 
ment program 111 and purchase application program 
111, and a mutual authentication between the content 
management program 115 and purchase program 144. 
Also, the authentication program 141 will store an so 
authenticate key used in the mutual authentication 
between the EMD server 4-1 and purchase application 
program 115, a one used in the mutual authentication 
between the EMD server 4-2 and purchase program 
144, and a one used in the mutual authentication 55 
between the EMD server 4-3 and purchase program 
145. 

[0115] It should be noted that when the content 
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management program 111 is installed in the personal 
computer 1 , the authenticate key the authentication pro- 
gram 141 used in the mutual authentication is not yet 
stored in the authentication program 141 but when a 
display/ope ration -instructive program 1 12 has success- 
fully registered the authenticate key, the key will be sup- 
plied from the EMD registration server 3 and stored in 
the authentication program 141 . 

[01 16] The decryption program 1 42 decrypts a con- 
tent when the personal computer 1 plays back the con- 
tent stored in the content files 161-1 to 161-N recorded 
in the content data base 1 14. 

[0117] When checking put a predetermine content 
to the portable device 6-2 or checking in a predeter- 
mined content from the portable device 6-2, the PD 
driver 1 43 supplies the portable device 6-2 with the con- 
tent or a command making the portable device 6-2 do a 
predetermined operation. 

[0118] When checking put a predetermine content 
to the portable device 6-1 or checking in a predeter- 
mined content from the portable device 6-1, the PD 
driver 1 43 supplies the device driver 1 1 6-1 with the con- 
tent or a command making the device driver 1 1 6-1 do a 
predetermined operation. 

[0119] When checking put a predetermine content 
to the portable device 6-3 or checking in a predeter- 
mined content from the portable device 6-3, the PD 
driver 143 supplies the device driver 116-2 with the con- 
tent or a command making the device driver 1 1 6-2 do a 
predetermined operation. 

[0120] The purchase program 144 is a so-called 
plug-in program. It is installed along with the content 
management program 1 1 1 into the personal computer 
1, supplied from the EMD registration server 3 via the 
network 2, or supplied as recorded in a predetermined 
CD. When installed in the personal computer 1 , the pur- 
chase program 144 will transmit or receive the content 
management program 111 and data via an interface of 
a predetermined form the content management pro- 
gram 1 1 1 has. 

[0121] The purchase program 144 is composed of 
shuffled or encrypted instructions, for example, to con- 
ceal the instructed operations from outside to make it 
difficult to interpret the instructions (for example, even if 
the user can read directly the purchase program 144, be 
cannot identify the instructions. 

[0122] The purchase program 1 44 requests, via the 
network 2, the EMD server 4-2 to send a predetermined 
content and thus receives the content from the EMD 
server 4-2. Upon reception of the content from the EMD 
server 4-2, the purchase program 144 will account for 
the content. 

[0123] The purchase program 145 is to be installed 
along with the content management program 111. It 
requests, via the network 2, the EMD server 4-3 to send 
a predetermined content and thus receives the content 
from the EMD server 4-3. Upon reception of the content 
from the EMD server 4-3, the purchase program 1 45 will 
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account for the content. 
[0124] Based on a filtering data file 181, display 
data file 182, image files 183-1 to 183-K or a history 
data file 1 84, the display/ope rati on -instructive program 
112 displays an image of a predetermined window on 
the display unit 20, and gives a check-in or check-out 
instruction to the content management program 1 1 1 in 
response to an operation of the keyboard 1 8 or mouse 
1 9 by the user. 

[0125] The filtering data file 181 stores data for 
weighting contents stored in the content flies 161-1 to 
161 -N recorded in the content data base 114, and is 
recorded in the HDD 21. 

[0126] The display data file 182 stores data corre- 
sponding to the contents stored in the content files 1 61 - 
1 to 161-N recorded in the content data base 114, and 
is recorded in the HDD 21 . 

[0127] The image files 1 83-1 to 1 83-N store images 
corresponding to the content files 161-1 to 161-N 
recorded in the content data base 1 1 4 or images corre- 
sponding to packages which will further be described 
later, and are recorded in the HDD 21 . 
[0128] The image files 183-1 to 183-K will be 
referred to simply as "image file 1 83 M hereafter wher- 
ever they have not be referred to individually. 
[0129] The history data file 184 stores history data 
including a number of times the contents stored in the 
content files 161-1 to 161-N recorded in the content 
data base 1 1 4 have been checked out, a number of 
times the contents have been checked in, and the dates 
on which the check-out an check-in were made. The 
history data file 1 84 is recorded in the HDD 21 . 
[0130] For the registration, the display/ope ratio n- 
instructive program 112 transmits, via the network, an 
ID of the pre-stored content management program 1 1 1 
to the EMD registration server 3, while receiving, via the 
network 2, the authenticate key and EMD selection pro- 
gram 131 from the EMD registration server 3 and sup- 
plying them to the content management program 111. 
[0131] The recording program 113 is used to dis- 
play an image of a predetermined window, and read 
data such as a recording time of a content from a CD 
being the optical disc 42 set in the drive 22 in this 
embodiment in response to an operation of the key- 
board 18 or mouse 19 by the user. 
[0132] Based on a recording time of a content 
recorded in a CD, the recording program 113 requests, 
via the network 2, the WWW server 5-1 or 5-2 to send 
data corresponding to the CD such as album name or 
artist's name or data corresponding to a content 
recorded in the CD such as a music piece title, and thus 
receives, via the network 2, the data corresponding to 
the CD or the content recorded in the CD from the 
WWW server 5-1 or 5-2. 

[0133] Also, the recording program 1 1 3 supplies the 
display/operation-instructive program 112 with the 
received data corresponding to the CD or data corre- 
sponding to the content recorded in the CD. 



[0134] Further, when supplied with a recording 
instruction, the recording program 113 reads and out- 
puts to the content management program 111a content 
from a CD being the optical disc 42 set in the drive 22 in 

5 this embodiment. 

[01 35] The content data base 114 stores into any of 
the content files 1 61 -1 to 1 61 -N a content supplied from 
the content management program 1 1 1 and having been 
compressed in a predetermined manner and encrypted 

w in a predetermined manner (records the content into the 
HDD 21 ). The content data base 1 1 4 stores usage rules 
for contents stored in the content files 161-1 to 161-N 
into any of the usage rule files 162-1 to 162-N corre- 
sponding to the content files 1 61 -1 to 1 61 -N in which the 

is contents are stored (records the usage rules into the 
HDD 21). 

[0136] The content data base 114 may record the 
content files 161-1 to 161-N or usage rule files 162-1 to 
1 62- N as records. 

20 [0137] A usage rule for a content stored in the con- 
tent file 1 61 -1 for example is stored in the usage rule file 
162-1 . A usage rule for a content stored in the content 
file 161-N is stored in the usage rule file 162-N. 
[0138] Note that data recorded in the usage rule 

25 files 162-1 to 162-N correspond to those recorded in a 
time limit data base or music data base which will fur- 
ther be described later. Namely, the content data base 
114 includes the time limit data base and music data 
base. 

30 [0139] The content files 161-1 to 161-N will be 
referred to simply as "content file 161" hereinafter wher- 
ever they have not be referred to individually. Also, the 
usage rule files 162-1 to 162-N will be referred to simply 
as "usage rule file 162" hereafter wherever they have 

35 not to be referred to individually. 

[0140] The purchase application program 115 is 
supplied from the EMD registration server 3 via the net- 
work 2 or as recorded in a predetermined CD-ROM. 
The purchase application program 1 1 5 requests, via the 

40 network 2, the EMD server 4-1 to send a predetermined 
content, while thus receiving the content from the EMD 
server 4-1 and supplying it to the content management 
program 111. Also, upon reception of the content from 
the EMD server 4-1, the purchase application program 

45 115 will account for the content. 

[0141] Next, the correspondence between data 
stored in the display data file 82 and the content files 
1 61 -1 to 1 61 -N stored in the content data base 1 14 will 
be described herebelow: 

50 [01 42] Firstly, a content stored in any of the content 
files 161-1 to 161-N belongs to a predetermined pack- 
age. More specifically, the package is any of an original 
package, my selected package and filtering package. 
[0143] Of the above packages, the original package 

55 has more than one content belonging thereto. This 
package corresponds to the content classification 
(namely, so-called album) in the EMD servers 4-1 to 4-3 
or to one CD. A content belongs to any original package 
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and cannot belong to a plurality of original packages. 
Also, an original package to which a content belongs 
cannot be modified. The user can edit a part of informa- 
tion corresponding to an original package (for example, 
addition of information or change of added information). 5 
[0144] More than one content freely selected by the 
user belong to the my selected package. The user can 
arbitrarily edit contents for assignment to my selected 
packages, respectively. A content can belong to more 
than one my selected package at a time. Also, a content 
may not belong to any my selected package. 
[0145] Contents selected based on a filtering data 
stored in a filtering data file 181 belong to the filtering 
package. The filtering data is supplied from the EMD 
server 4-1 to 4-3 or WWW server 5-1 or 5-2 via the net- 
work 2 or as recorded in a predetermined CD. The user 
can edit the filtering data stored in the filtering data file 
181. 

[0146] The filtering data is a reference for selection 
of a predetermined content or for calculation of a weight 
corresponding to the content. For example, filtering data 
corresponding to top tens of the weekly J-POP (Japan 
pops) can be used by the personal computer 1 to iden- 
tify contents of the weekly Japan Pops Nos. 1 to 1 0. 
[0147] The filtering data file 181 includes a filtering 
data for selection of contents in the descending order of 
the lengths of period for which they have been checked 
out for the past one month, a filtering data for selection 
of contents in the descending order of the numbers of 
times they have been checked out for the past half year, 
or a filtering data for selection of contents in which a 
character "Al (love)" is included in the music piece titles 
(content name). 

[0148] Thus, contents in the filtering package are 
selected by comparing a filtering data with a content 35 
display data 221 (including data the user has set), a his- 
tory data 184 or the like. 

[0149] The driver 117 drives the audio input/output 
interface 24 under the control of the content manage- 
ment program 1 1 1 or the like to input a content being a 40 
digital data supplied from outside and supply it to the 
content management program 111, output as a digital 
data a content supplied from the content data base 114 
via the content management program 1 1 1 , or output an 
analog signal corresponding to a content supplied from 45 
the content data base 114 via the content management 
program 111. 

[0150] FIG. 5 shows an example of the dis- 
play/operation-instructive window the display/ope ratio n- 
instructive program 1 12 makes the display unit 20 dis- 50 
play. 

[0151] There are displayed in the display/operation- 
instructive window a button 201 for starting up the 
recording program 1 13, a button 202 for starting up the 
EMD selection program 1 31 , a button 203 for displaying 55 
a field in which check-in or check-out is set, a button 204 
for displaying a field in which a my selected package is 
to be edited, etc. 
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[0152] When a button 205 is selected, data corre- 
sponding to an original package is displayed in a field 
21 1 of the window. When a button 206 is selected, data 
corresponding to a my selected package is displayed in 
the field 21 1 . When a button 207 is selected, data corre- 
sponding to a filtering package is displayed in the field 
211. 

[0153] Data displayed in the field 211 concerns a 
package. For example, it is a package name or an art- 
ist's name. 

[0154] As shown in FIG. 5, there are displayed in 
the field 21 1 a package name "FIRST* and artist's name 
"A TARO", a package name "SECOND'' and artist's 
name "A TARO", etc. 

[0155] The display/operation-instructive window 
has also a field 212 in which there is displayed data cor- 
responding to a content belonging to a packet selected 
in the field 211. Data displayed in the field is a music 
piece title, playing time or a number of times the content 
can be checked out. 

[0156] In FIG. 5, a package corresponding to the 
package name "SECOND" is selected. So, there are 
displayed in the field 21 2 the music piece title (content 
name) "MINAMI-NO-SAKABA" corresponding to the" 
content belonging to the package corresponding to the 
package name "SECOND", a number of times the con- 
tent can be checked out (for example, one eighth note is 
for one check-out and two eighth notes are for two 
check-out's), and music piece title (content name) 
"KITA-NO-HAKABA" and number of times the content 
can be checked (for example, one eighth note corre- 
sponds to one check-out). 

[0157] Thus, one eighth note as a number of times 
a content can be checked out, displayed in the field 212, 
indicates that a corresponding content can be checked 
out once. 

[01 58] A rest as a number of times a content can be 
checked out, displayed in the field 212, indicates that a 
corresponding content cannot be checked out (the 
number of check-out's is zero; however, the personal 
computer 1 can play back that content). A C clef as a 
number of times a content can be checked out, dis- 
played in the field 212, indicates that the number of 
check-out's for a corresponding content is limitless (the 
content can be checked out any number of times). 
[01 59] Note that the number of times a content can 
be checked out may be indicated with a corresponding 
number of pieces of a predetermined figure (for exam- 
ple, it may be a circle, star, crescent or the like) as 
shown in FIG. 5 as well as a number. 
[0160] Also there is displayed in the display/opera- 
tion-instructive window a field 208 in which an image or 
the like corresponding to a selected package or content 
(corresponding to any of the image files 1 83-1 to 183-K 
in FIG. 4) is displayed. In this field, a button 209 is 
clicked when playing back a selected content (output- 
ting a sound corresponding to the content to the 
speaker 45). 
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[0161] When a music piece title of a predetermined 
content (content name) displayed in the field 212 is 
selected and a deleting operation is made while the but- 
ton 205 is selected and data corresponding to an origi- 
nal package is being displayed in the field 211, the 5 
display/ope rati on -instructive program 112 will make the 
content management program 1 1 1 delete the predeter- 
mined content stored in the content data base 1 1 4, cor- 
responding to the selected music piece title. 
[0162] When a content read from a CD is recorded w 
into the content data base 114 while a button 255 
(which will further be described later) in the window dis- 
played under the control of the recording program 1 13 is 
being selected (made active), the display/operation- 
instructive program 1 1 2 will make the display/operation- 15 
instructive window display a field 213 in which there is 
displayed a music piece title of a content (content name) 
stored in any pre-designated one of the portable 
devices 6-1 to 6-3. 

[0163] When a content read from a CD is recorded 20 
into the content data base 114 while a button 255 
(which will further be described later) in the window dis- 
played under the control of the recording program 1 1 3 is 
being selected (made active), the display/operation- 
instructive program 1 1 2 will make the content manage- 25 
ment program 1 1 1 check out the content recorded in the 
content data base 114 and read from the CD to any pre- 
designated one of the portable devices 6-1 to 6-3. 
[0164] There is displayed in the field 213 at the left- 
most position thereof corresponding to the music piece 30 
title of a content (content name) a symbol indicating 
whether the content can be checked in to the personal 
computer 1. For example, a symbol "Q" at tne leftmost 
position of the field 213 indicates that a content corre- 
sponding to a music piece title of a content can be 35 
checked in to the personal computer 1 (that is, it has 
been checked out from the personal computer 1). A 
symbol "X" at the leftmost position of the field 213 indi- 
cates that a content corresponding to a music piece title 
of a content cannot be checked in to the personal com- 40 
puter 1 (that is, it has not been checked out from the 
personal computer 1 ; for example, it has been checked 
out from any other personal computer). 
[0165] When the display/operation-instructive 
program 112 has displayed the field 213 in the 45 
display/ope ration- instructive window, the display/opera- 
tion-instructive program 112 will display in the dis- 
play/operation-instructive window a field 214 in which 
the name of a portable package (to which a content 
stored in any pre-designated one of the portable so 
devices 6-1 to 6-3 belongs) is displayed, a button 210 to 
close the field 21 3, and a button 21 5 to execute a check- 
in or check-out operation. 

[0166] Further, when the display/operation- 
instructive program 112 has displayed the field 213 in 55 
the display/operation -instructive window, the dis- 
play/operation-instructive program 1 12 will display in the 
display/operation-instructive window a button 216 to set 



a check-out operation for a content corresponding to a 
music piece title selected in the field 212, a button 217 
to set a check-in operation for a content corresponding 
to a music piece title selected in the field 213, a button 
218 to set a check-in operation for all contents corre- 
sponding to content names displayed in the field 213, 
and a button 219 to cancel the check-in or check-out 
setting. 

[0167] Even with the check-in or check-out setting 
made by using the buttons 21 6 to 21 9, however, the per- 
sonal computer 1 will not execute the check-in or check- 
out operation. 

[0168] When the button 21 5 is clicked after a check- 
in or check-out is set by using the buttons 216 to 219, 
the display/ope ration -instructive program 112 will make 
the content management program 111 execute the 
check-in or check-out. That is to say, when the button 
215 is clicked, the display/ope ration -instructive program 

1 12 will make, based on the check-in or check-out set- 
ting, the content management program 1 1 1 transmit a 
content, or a command to erase a predetermined con- 
tent corresponding to the check-in setting (e.g., a com- 
mand to erase a predetermined content stored in any of 
the portable devices 6-1 to 6-3), to any of the portable 
devices 6-1 to 6-3, and to update the usage rule stored 
in the usage rule file 162 corresponding to the content 
or command thus transmitted. 

[0169] When the check-in or check-out is executed, 
the display/ope rati on -instructive program 112 will 
respond to the transmitted content or command to 
update the history data stored in the history data file 
184. The history data includes information for identifica- 
tion of a content having been checked in or out or a date 
when the content has been checked in or out, and the 
name of a one of the portable devices 6-1 to 6-3 from 
which the content has been checked out. 
[01 70] Since the check-in or check-out can be set in 
a short time, the user can quickly know the status after 
execution of a check-in or check-out operation, whereby 
the number of times a time-taking check-in or check-out 
operation is done can be reduced to minimize the total 
time (including the setting and execution of a check-in or 
check-out operation) taken for the check-in or check-out 
procedure. 

[0171] FIG. 6 shows an example of the window 
which the recording program 1 13 makes the display unit 
20 display. Based on CD information received from the 
WWW server 5-2 for example, the recording program 

1 13 will display a CD title such as "ACYNCHRONIZED" 
in a field 251. Also, based on CD information received 
from the WWW server 5-2, the recording program 113 
will display an artisfs name such as "KUWAI" in a field 
252. 

[0172] Based on CD information received from the 
WWW server 5-2, the recording program 113 will dis- 
play titles of music pieces such as "HEAT", "PLANET", 
"BLACK", "SOUL", etc. in a region of a field 253 where 
music piece titles are to be displayed. Similarly, the 
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recording program 113 will display an artist's name 
such as "KUWAI" is a region of the field 253 where art- 
ists' names are to be displayed. 

[0173] After receiving a predetermined CD informa- 
tion, the recording program 113 will store it into a prede- s 
termined directory in the HDD 21 . 
[0174] Upon reception of an instruction for acquisi- 
tion of CD information via clicking of a button 254, the 
recording program 113 will first search the predeter- 
mined directory in the HDD 21. When the CD informa- 10 
tion is found stored in the directory, the recording 
program 1 13 will display a dialogue box (not shown) to 
prompt the user for selection of whether he or she is 
going to use the CD information stored in the directory. 
[0175] When a button 256 displayed in the window 75 
displayed by the recording program 113 and which 
instructs to start recording of a content, is clicked, the 
recording program 1 13 will read a content from a CD set 
in the drive 22, and supply it along with the CD informa- 
tion to the content management program 111. The com- 20 
pression/expansion program 138 of the content 
management program 1 1 1 compresses the content 
supplied from the recording program 1 13 in a predeter- 
mined manner, and the encryption program 137 
encrypts the compressed content. Also, the usage rule 25 
conversion program 139 generates a usage rule for the 
compressed and encrypted content. 
[0176] The content management program 111 will 
supply the compressed and encrypted content along 
with the usage rule to the content data base 114. 30 
[0177] The content data base 114 will generate a 
content file 161 and usage rule file 162 for the content 
received from the content management program 111, 
and store the content into the content file 161 and the 
usage rule into the usage rule file 1 62. 35 
[0178] When the content and usage rule for the 
content are stored into the content data base 114, the 
content management program 1 1 1 will supply the CD 
information and usage rule received from the recording 
program 113 to the display/operation-instructive pro- 40 
gram 1 12. 

[0179] The display/ope ration- instructive program 
112 will a display data for storage into the display data 
file 182 according to the usage rule for the content 
stored in the content data base 114 by the recording 45 
and the CD information. 

[0180] The window displayed by the recording pro- 
gram 113 has displayed therein a button 255 to auto- 
matically set whether any of the portable devices 6-1 to 
6-3 is made to check out a content read from the CD so 
when the content read from the CD is recorded into the 
content data base 114. 

[01 81 ] For example, when the button 255 is clicked, 
the recording program 113 will display a pull-down 
menu showing a list of the portable devices 6-1 to 6-3. 55 
When the user selects any of the portable devices 6-1 to 
6-3 from the pull-down menu, the personal computer 1 
will automatically check out the content recorded from 
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the CD to any selected one of the portable devices 6-1 
to 6-3. When the user selects "NOT CHECK OUT" from 
the pull-down menu, the personal computer 1 will not 
check out the content recorded from the CD. 
[0182] Thus, when the content read from the CD is 
recorded into the content data base 114 with only the 
button 255 in the window displayed by the recording 
program 1 13 being set active, the personal computer 1 
can make any pre-designated one of the portable 
devices 6-1 to 6-3 check out the content read from the 
CD. 

[0183] Referring now to FIG. 7, there is shown a 
flow chart of operations effected by the CPU 1 1 which 
executes the content management program 111, dis- 
play/operation-instructive program 112, recording pro- 
gram 113 and content data base 114 in transferring a 
content played back from a CD set in the drive 22 to the 
HDD 21 and thus copying the content from the CD to 
the HDD 21. When the user operates the keyboard 18 
or mouse 19 to supply to the CPU 1 1 via the interface 
1 7, a command to transfer, for copying, a content played 
back from a CD (not shown) set in the drive 22, the 
recording program 113 will display, at step S11, a GUI 
(graphical user interface) shown in FIG. 6 for example; 
for selection of a content which is to be copied into the 
display unit 20 via the interface 17. 
[01 84] More specifically, the recording program 113. 
will read TOC (table of contents) of a CD set in the drive • 
22, acquire content information from the CD, and dis- 
play it on the display unit 20. Alternatively, the recording 
program 113 will read ISRC (International Standard 
Recording Code) for each content included in the CD, 
acquire the content information, and display it on the 
display unit 20. Still alternatively, when the button 254 is : 
clicked, the recording program 113 will access the 
WWW server 5-1 or 5-2 via the network 2, acquire the 
content information from the CD by the use of TOC, and 
display music piece titles corresponding to the content 
in the field 253. 

[0185] Using GUI displayed on the display unit 20, 
the user operates the keyboard 18 or mouse 19, and 
clicks a check box for each of the music piece titles dis- 
played in the field 253 to select a content to be copied. 
[01 86] Next at step S1 2, the recording program 1 1 3 
makes the usage rule management program 140 check 
the time limit data base stored in the HDD 21 (corre- 
sponding to the usage rule files 162-1 to 162-N in the 
content data base 1 14 shown in FIG. 4). The detail of 
this checking of the time limit data base will further be 
described later with reference to the flow chart shown in 
FIG. 8. 

[0187] At step S31, the usage rule management 
program 1 40 cooperates with the CPU 32 of the adaptor 
26 to compute a hash value of the entire time limit data 
base, and at step S32, it will compare the computed 
hash value with a previously saved one. 
[0188] Note that when no data is recorded in the 
time limit data base, the usage rule management pro- 
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gram 140 will not compute any hash value. 
[0189] More particularly, the time limit data base is 
formed in the HDD 21, and stores, as information for 
management of contents recorded in the HDD 21 , pairs 
of ISRC and copying date of a content having been 
recorded, as shown in FIG. 9. In the example shown in 
FIG. 9, ISRC and copying date area stored for each of 
three items 1 to 3. At step S38, a hash value of the 
entire time limit data base, based on the ISRCs and 
copying dates of all contents recorded in the time limit 
data base, is computed by the CPU 32 of the adaptor 26 
and stored in the nonvolatile memory 34. The hash 
value is a value obtained by applying a hash function to 
the data. The hash function is generally a unidirectional 
function to map long data of a variable length with shot 
data of a fixed length, and has such a nature that hash 
values will not easily conflict with each other. The hash 
functions include SHA (secure hash algorithm), MD 
(message digest)5, etc. At step S31 , the usage rule 
management program 140 compute a hash value as in 
the computation by the CPU 32. Then at step S32, the 
usage rule management program 140 will request the 
CPU 32 to read a hash value stored in the nonvolatile 
memory 34, and at step S31, it will compare the trans- 
ferred hash value with the one it has computed. 
[0190] At step S33, the usage rule management 
program 140 judges whether the hash value computed 
at step S31 coincides the hash value of the previous 
time limit data base stored in the nonvolatile memory 
34. When no coincidence is found between the hash 
values, the usage rule management program 140 will 
determine that the time limit data base has been falsi- 
fied or altered, and make the recording program 113 
generate a message like "since time limit data base has 
been altered, no copying is possible" for example, and 
output the message to the display unit 20 via the inter- 
face 1 7 on which the message will be displayed. Here- 
after, copying is inhibited. Namely, in this case, it is 
inhibited to play back the content recorded in the CD for 
copying to the HDD 21. 

[0191] When the hash value computed at step S31 
is found coincident with the preceding has value, the 
usage rule management program 140 goes to step S35 
where it will make the recording program 113 acquire 
from the CD ISRC of a content designated at step S1 1 
and selected as a one to be copied. If no ISRC is 
recorded in the CD, the usage rule management pro- 
gram 140 will make the recording program 113 read 
TOC data from the CD, and apply the hash function to 
the data to acquire a data of an appropriate length such 
as 58 bits which is to be used for ISRC. 
[0192] At step S36, the usage rule management 
program 140 judges whether the ISRC (selected con- 
tent) acquired at step S35 is registered in the time limit 
data base (in FIG. 9). If the ISRC is not registered in the 
time limit data base, it means that the content has not 
yet been recorded in the HDD 21. So, the usage rule 
management program 140 goes to step S37 where it 



will register the ISRC of the content and present data 
into the time limit data base. Note that the usage rule 
management program 140 uses, as the present date, a 
value transferred from the CPU 32 and outputted from 

5 the RTC 35 of the adaptor 26. At step S38, the usage 
rule management program 1 40 reads data from the time 
limit data base at the time and transfer it to the CPU 32 
of the adapter 26. The CPU 32 computes a hash value 
of transferred data and saves it in the nonvolatile mem- 

10 ory 34. As in the above, the hash value this saved will be 
used as a previously saved hash value at step S32. 
[0193] Next at step S39, the usage rule manage- 
ment program 140 will set a non-registration flag indi- 
cating that the selected content is snot registered in the 

15 time limit data base. This flag is used at step S1 3 in FIG. 
7 to judge whether the selected content is registered in 
the time limit data base. 

[0194] If it has been determined at step S36 that the 
ISRC of the selected content is registered in the time 

20 limit data base, it means that the selected content is a 
one having been registered in the HDD 21 at least once. 
In this case, the usage rule management program 140 
goes to step S40 where it will judge whether the present 
date (output from the RTC 35 of the adaptor 26) is more 

25 than 48 hours from the date of the past registration of 
the selected content, registered in the time limit data 
base. When the present time is already more than 48 
hours from the registration date, it means that the con- 
tent has been recorded at least once in the HDD 21. 

30 However, since the present time is more than 48 hours 
from the date at the content was recorded, the content 
cannot substantially be copied in a large volume even if 
it is copied again. In this case, it is permitted to copy the 
content into the HDD 21 . Then, the usage rule manage- 

35 ment program 140 will go to step S41 where it will 
change the date in the time limit data base from the date 
of the past registration to the present data (output from 
the RTC 35). Then, the usage rule management pro- 
gram 140 will return to step S38 where it will make the 

40 CPU 32 compute a hash value of the entire time limit 
data base and save it into the nonvolatile memory 34. At 
step S39, the usage rule management memory 140 will 
set a non-registration flag for that content. 
[0195] On the other hand, if it is determined at step 

45 S40 that the present date is not more than 48 hours 
from the registration date, it is inhibited to copy the 
selected content into the HDD 21. In this case, the 
usage rule management program 140 will go to step 
S42 where it will set a registration flag for the selected 

50 content. 

[0196] If the predetermined time is not judged at 
step S40 to have not elapsed, the content cannot newly 
be copied, so that copying the content in a large volume 
required for fraudulent sales or distribution for example 
55 is substantially disabled without unreasonable inhibition 
of the copying of the content for an ordinary, legal use. 
Note that the criterion for the judgement, taken at step 
S40, is a time elapse of more than 48 hours but it is not 



16 



31 



EP 1 096 388 A1 



32 



limited to 48 hours. The criterion may be any time within 
a range of 12 hours to 1 68 hours for example. 
[0197] As in the above, a flag indicating whether the 
selected content is registered in the HDD 21 is set 
through checking of the time limit data base. 5 
[0198] Referring to FIG. 7 again, the description will 
further be made. At step S13, the copy management 
program 133 judges, based on the above-mentioned 
flag, that the selected content has been registered in the 
time limit data base. If the selected content has already w 
been registered, the copy management program 133 
will go to step S14 where it will make the recording pro- 
gram 113 display, on the display unit 20, a message like 
"This music piece cannot be copied since not more than 
48 hours has elapsed since the music piece has been is 
copied once" for example. Thus, the user can know the 
reason why the content cannot be copied to the HDD 
21. 

[0199] If it is determined at step S13 that the 
selected content has not yet been registered in the time 20 
limit database, the copy management program 133 
goes to step S15 where the recording program 1 13 will 
make the drive 22 read a content from the CD set in the 
drive 22. This content has a watermark code inserted 
therein at a predetermined position as shown in FIG. 25 
10. The recording program 113 will extract the water- 
mark code included in the content at step S16 and 
judge, at step S17, whether the watermark code indi- 
cates an inhibition of the content from being copied. If 
the watermark code indicates the copy inhibition, the 30 
copy management program 133 will go to step S18 
where it will make the recording program 113 display a 
message like "copying is inhibited" for example on the 
display unit 20 via the interface 17, and terminate the 
copying operation. 35 
[0200] On the other hand, if it is judged at step S1 7 
that the watermark code indicates no copy inhibition, 
the copy management program 133 goes to step S19 
where the recording program 113 will make the com- 
pression/expansion program 1 38 compress the content 40 
by a software operation using a method such as ATRAC 
(Adaptive Transform Acoustic Coding)3 (trade mark). At 
step S20, the recording program 113 will make the 
encryption program 137 encrypt the content by a 
method such as DES (Data Encryption Standard), 45 
FEAL (Fast Encipherment Algorithm) or the like using 
an encryption key having been preset and stored in the 
memory 13. The encryption key may be a one formed 
based on a random number generated by a software 
operation or a random number generated by the CPU so 
32 of the adaptor 26. By encrypting the encryption key 
using the personal computer 1 and CPU 32 of the adap- 
tor 26 as a hardware associated with the personal com- 
puter 1 in a cooperative combination, an encryption can 
be attained which will make it more difficult to decrypt 55 
the encrypted encryption key. 

[0201] Next at step S21 , the recording program 1 1 3 
transfers an encrypted data to the content data base 



1 14, gives a file name to the data and makes the HDD 
21 save it as one file (as content file 161). Alternatively, 
the recording program 113 may give position informa- 
tion (e.g., a number of byes from the top) as a part of 
one file to the encrypted data before save into the HDD 
21. 

[0202] The data save may be done separately from 
or simultaneously with the aforementioned compression 
and encryption. 

[0203] Further at step S22, the recording program 
1 13 will make the encryption program 137 encrypt the 
encryption key with which the content has been 
encrypted, using a predetermined save key stored in 
the nonvolatile memory 34 and by the aforementioned 
DES method, FEAL method or the like, save the 
encrypted encryption key in the music data base in the 
HDD 21 (corresponding to the usage rule files 162-1 to 
1 62-N of the content data base 1 14 shown in FIG. 4). 
[0204] At step S23, the recording program 113 
makes a set of saved information on the file, encrypted 
encryption key, information of the content, and elements 
of music piece title information supplied by the user via 
the GUI, and register it in the music data base in the 
HDD 21 (as the usage rule files 1 62-1 to 1 62-N). At step 
S24, the recording program 113 will make the CPU 32 
compute a hash value of the entire music data base and 
save it into the nonvolatile memory 34. 
[0205] In this way, the music data base as shown in 
FIG. 11 for example is registered into the HDD 21. In 
this example music data base, there are recorded a file 
name, encrypted encryption key, music piece title, play 
time length, playback conditions (start date, end date 
and playback limit), playback counter, playback 1 
accounting condition, copying condition (copies), copy 
counter and copying condition (SCMS) for each of items 
1 to 3. 

[0206] In the method defined by SDMI (Secure Dig- 
ital Music Initiative) for example, a number of times a 
content copied from a CD can be checked out (check- 
out limit) is set to 3. 

[0207] Since it is arranged that when a predeter- 
mined period of time elapses from copying of a content 
from a CD to the HDD 21, the content can be copied 
again, the content can be copied several times allowed 
only for private use by the user. On the other hand, if it 
is tried to copy the content a larger number of times than 
the allowed number for the private use by the user, for 
example, in a large volume, the copying will take a very 
long lime and actually be impossible. Also even if the 
personal computer 1 has failed and the content 
recorded in the HDD 21 has been erased, the erased 
content can be copied again and recorded into the HDD 
21 when a predetermined time elapses. 
[0208] Also, the content of the time limit data base 
recorded into the HDD 21 can commonly be shared via 
the network 2. 

[0209] In the above, there has been explained the 
example in which a copying date is stored correspond- 
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ingly to ISRC. In addition to the ISRC, however, any 
other information (such as music piece title, album 
name or their combination) with which a content and CD 
can be identified may be used. 

[0210] Next, move of a content from the HDD 21 to 
the flash memory 61 (e.g., memory stick (trade mark)) 
in the portable device 6 and content check-out, effected 
by the CPU 11 which executes the display/operation- 
instructive program 112 and content management pro- 
gram 1 1 1 and CPU 52 which executes the main pro- 
gram, will be described herebelow with reference to the 
flow chart shown in FIGS. 12 to 14. 
[021 1 ] First, the content move will be described her- 
ebelow. At step S51, the move management program 
134 makes the usage rule management program 140 
compute the hash value of the entire music data base, 
and at step S52, it compares the computed hash value 
with a hash value having previously been computed by 
the CPU 32 and saved in the nonvolatile memory 34. 
When there is no coincidence between these hash val- 
ues, the move management program 1 34 goes to step 
S53 where it will make the display/operation-instructive 
program 112 display a message like "Possibly music 
data base has been falsified or altered" on the display 
unit 20, and terminate the operation. These operations 
are similar to those effected at steps S31 to S34 in FIG. 
8. In this case, the content move from the HDD 21 to the 
portable device 6 will not be done. 
[0212] Next at step S54, the move management 
program 1 34 reads information on a content recorded in 
the music data base (included in the content data base 
114) formed in the HDD 21, and makes the dis- 
play/operation-instructive program 1 12 display the infor- 
mation as a selecting GUI on the display unit 20. The 
user clicks a music piece title (content name) and button 
21 6 displayed in the field 212 in FIG. 5 to select the con- 
tent to be moved from the HDD 21 to the portable device 
6. Next at step S55, the move management program 
134 examines the playback condition, copying condi- 
tion, playback accounting condition, etc. for the content 
having been selected at step S54. This operation will 
further be described later with reference to the flow 
chart in FIG. 15. 

[0213] Next at step S56, mutual authentication is 
made between the authentication program 141 of the 
personal computer 1 and CPU 53 of the portable device 
6 and a communication key is shared between them. 
[0214] For example, it is assumed here that the 
flash memory 61 (or EEPROM 68) of the portable 
device 6 has a master key KM stored in advance and 
the RAM 13 of the personal computer 1 (or a predeter- 
mined file in the HDD 21) has an individual key KP and 
ID stored in advance. The CPU 53 is supplied with the 
ID previously stored in the RAM 13 from the authentica- 
tion program 141 and applies the hash function to that 
ID and its own master key MK to generate the same key 
as the individual key of the personal computer 1 , stored 
in the RAM 1 3. Thus, the personal computer 1 and port- 



able device 6 will share a common individual key which 
is used to generate a provisional communication key. 
[0215] Alternately, an ID and master key KMP are 
stored in advance in the RAM 13 of the personal com- 

5 puter 1 and an ID and master key KMM are stored in 
advance in the flash memory 61 of the portable device 
6. The RAM 13 sends its ID and master key to the flash 
memory 61 which will also send its ID and master key to 
the RAM 13, and the RAM 13 applies the hash function 

10 to the ID and master key received from the flash mem- 
ory 61 while the latter will apply the hash function to the 
ID and master key received from the RAM 13. Thus, the 
RAM 13 generates an individual key for the flash mem- 
ory 61 while the latter generates an individual key for the 

is RAM 13. A provisional communication key will further 
be generated from the individual key. 
[0216] It should be noted that for the authentication 
method, the IOS (International Organization for Stand- 
ardization) 9798-2 can be used for example. 

20 [0217] When the mutual authentication is not cor- 
rectly done, the operation is terminated. When the 
mutual authentication has successfully be done, the 
move management program 134 will make the content 
data base 1 1 4 read the file name of the selected content 

25 from the music data base at step S57, and reads a con- 
tent having the file name (for example, the file name has 
been encrypted at step S20 in FIG. 7) from the HDD 21 . 
At step S58, the move management program 134 con- 
verts the compression method (for the compression 

30 effected at step S19), encryption method (for the 
encryption effected at step S20), format (for example, 
that for the header), etc. having been used for the con- 
tent being a digital data read at step S57 to those used 
in the portable device 6. The conversion will further be 

35 described later with reference to the flow chart in FIG. 
17. 

[0218] At step S59, the move management pro- 
gram 134 will make the PD driver 143 transfer the con- 
tent converted at step S58 to the portable device 6 via 
40 the USB port 23. At step S60, the CPU 53 of the porta- 
ble device 6 receives the transmitted content via the 
USB connector 56 and stores it as it is into the flash 
memory 61. 

[0219] At step S61, the move management pro- 
45 gram 134 will further make the usage rule conversion 
program 139 convert the playback conditions (start 
date, end date, playback limit, etc.) for the selected con- 
tent, registered in the music data base, to those used in 
the portable device 6. At step S62, the move manage- 
50 ment program 1 34 will further make the usage rule con- 
version program 139 convert the SCMS information in 
the copying condition for the selected content, regis- 
tered in the music data base, to a format managed by 
the portable device 6. Then at step S63, the move man- 
55 agement program 1 34 makes the PD driver 1 43 transfer 
to the portable device 6 the playback condition having 
been converted at step S61 and SCMS information hav- 
ing converted at step S62. The CPU 53 of the portable 
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device 6 saves the transferred playback condition and 
SCMS information into the flash memory 61. 
[0220] At step S64, the move management pro- 
gram 134 makes the PD driver 143 transfer to the port- 
able device 6 the playback condition, playback 5 
accounting condition, copying condition, etc. for the 
selected content, registered in the music data base, as 
in the format dealt with in the music data base by the 
CPU 1 1 , and save them into the flash memory 61 . 
[0221] At step S65, the move management pro- 10 
gram 134 makes the content data base 114 reads the 
encrypted encryption key for the selected content from 
the music data base, and then at step S66, it will make 
the decryption program 1 42 decrypt the encryption key 
with the save key saved in the RAM 13, and the encryp- is 
tion program 137 encrypt the decrypted encryption key 
with the communication key. Then the move manage- 
ment program 134 will make the PD driver 143 transfer 
the encryption key encrypted with the communication 
key to the portable device 6. 20 
[0222] At step S67, the CPU 53 of the portable 
device 6 will decrypt the encryption key transferred from 
the personal computer 1 by the use of the common 
communication key generated by the mutual authenti- 
cation, encrypt it using its own save key, correlate it wit 25 
the already saved data, and save it into the flash mem- 
ory 61. 

[0223] Upon completion of the saving of the encryp- 
tion key, the CPU 53 will inform, at step S68, the per- 
sonal computer 1 that the encryption key has been 30 
saved. When receiving this information from the porta- 
ble device 6 from the portable device 6, the move man- 
agement program 134 of the personal computer 1 will 
make, at step S69, the content data base 1 1 4 delete the 
content file 161 corresponding to the content, and the 35 
set of the elements of the content (i.e., usage rule file 
1 62) from the music data base. Thus, the content will be 
moved, not copied. At step S70, the move management 
program 134 transfers data in the music data abase to 
the CPU 32 of the adaptor 26 and makes the CPU 32 40 
compute the hash value of the entire music data base 
and save it into the nonvolatile memory 34. The hash 
value will be used as a previously saved one at step S52 
having been described above. 

[0224] Next, check-out of a content from the per- 45 
sonal computer 1 to the portable device 6 will be 
described below. This operation is similar to the content 
move from the personal computer 1 to the portable 
device 6 as having been described in the above with ref- 
erence to FIGS. 12 to 14. That is, the check-out opera- so 
tion is basically similar to the content move operation 
except that the check-out operation is executed in the 
personal computer 1 by the check-in/check-out man- 
agement program 132, and that at step S69 in FIG. 14, 
the number of times the content checked out and 55 
recorded in the music data base has been checked out 
(or can be checked out) Is updated (in the content move, 
the content is deleted). Therefore, the check-out opera- 
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tion will not be described any longer. 
[0225] Th CPU 1 1 which executes the content man- 
agement program 111 checks the playback conditions, 
etc. for a content selected at step S55 in FIG. 12. This 
checking operation will be described below with refer- 
ence to the flow chart in FIG. 1 5. At step S81 , the move- 
ment management program 134 makes the content 
data base 1 1 4 read various conditions from the music 
data base. Then at step S82, the move management 
program 134 judges whether the copy counter in the 
conditions read at step S81 has already exceeded the 
copy limit. When the copy counter has already 
exceeded the copy limit, no further copy can be permit- 
ted, so the move management program 134 will go to 
step S83 where it will make the display/operation- 
instructive program 1 1 2 display a message like "Copy 
counter has already exceeded copy limit" on the display 
unit 20, and terminate the operation. If it is determined 
at step S82 that th copy counter has not exceeded the 
copy limit, the move management program 134 goes to 
step S84 where it will judge whether the present date is 
past the playback end date. The present date is a one 
outputted from the RTC 35 of the adaptor 26. With this 
operation, the user will not be able to use any present 
time of the personal computer 1 , which is obtainable by 
intentionally correcting to a past one. The move man- 
agement program 134 is supplied with the present time 
from the CPU 32, and makes by itself the judgement at' 
step S84 or supplies, at step S81, the playback condi- 
tions read from the music data base to the CPU 32 of 
the adaptor 26 and thus makes the CPU 32 do the 
judgement at step S84. 

[0226] If the present date is past the playback end': 
date, the move management program 134 goes to step 
S85 where it will make the content data base 1 14 erase 
the selected content from the HDD 21 and information 
on the selected content from the music data base. At 
step S86, the move management program 1 34 makes 
the CPU 32 compute the hash value of the entire music 
data base and save it into the nonvolatile memory 34. 
Here the operation is terminated. Therefore, no content 
will be moved in this case. 

[0227] If it is determined at step S84 that the 
present date is not yet past the playback end data, the 
move management program 134 will go to step S87 
where it will judge whether the playback-accounting 
condition (e.g., fee per playback) for the selected con- 
tent is registered in the music data base. If the playback- 
accounting condition is found registered, the move man- 
agement program 134 will make, at step S88, the PD 
driver 143 communicate with the portable device 6 to 
judge whether the portable device 6 has an accounting 
function. If the portable device 6 has no accounting 
function, the selected content cannot be transferred to 
the portable device 6. Therefore, the move manage- 
ment program 134 will make, at step S89, the dis- 
play/operation-instructive program 112 display a 
message like "Destination has no accounting function" 
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on the display unit 20, and terminate the operation. 
[0228] If it is determined at step S87 that no play- 
back-accounting condition is registered or at step S88 
that the portable device 6 has the accounting function, 
the move management program 134 goes to step S90 
where it will judge whether other playback conditions 
such as playback limit are registered for the selected 
content. If the other playback conditions are found reg- 
ister, the move management program 134 goes to step 
S91 where it will judge whether the portable device 6 
has a function to follow the playback conditions. If the 
portable device 6 has no such a function, the move 
management program 134 goes to step S92 where it 
will make the display/operation -instructive program 112 
display a message like "Destination has no function to 
follow playback conditions" on the display unit 20, and 
terminate the operation. 

[0229] If it is determined at step S90 that no play- 
back conditions are registered, or if it is determined at 
step S91 that the portable device 6 has a function to fol- 
low the playback conditions, the checking of the play- 
back conditions will be terminated, and the move 
management program 134 will return to step S56 in 
FIG. 12. 

[0230] FIG. 16 shows an example of the playback 
condition managed (which can be followed) by the port- 
able device 6. The playback conditions shown in FIG. 1 6 
are stored in the EEPROM 68. In this example, a play- 
back start date and end dat are registered for each of 
contents for items 1 to 3. However, a playback limit is 
registered only for the item 2, not for the items 1 and 3. 
Therefore, when the content for the item 2 is taken as 
the selected content, it is possible to follow the playback 
limit as playback condition (a number of times a content 
can be played back), but when content for the item 1 or 
3 is taken as the selected content, it is not possible to 
follow the playback limit. 

[0231] Next, format conversion effected at step S58 
in FIG. 12 by the CPU 11 which executes the content 
management program 111, will be described in detail 
herebelow with reference to the flow chart shown in 
FIG. 17. At step S101, the move management program 
134 checks the format of the selected content (e.g., a 
header including playback conditions, usage rule, copy- 
ing conditions), recorded in the content data base 114. 
At step S102, the move management program 134 will 
check conditions settable in the destination (the porta- 
ble device 6 in this case). Namely, the move manage- 
ment program 134 inquires the CPU 53 of the portable 
device 6 of such settable conditions and acquires a 
reply from the CPU 53. At step S103, the move man- 
agement program 134 will determine, based on the con- 
ditions checked at step S102, ones, settable in the 
destination, of the conditions in the format registered in 
the music data base. 

[0232] At step S104, the move management pro- 
gram 134 judges whether there are conditions settable 
in the destination. If there are no such conditions, the 



move management program 134 goes to step S105 
where it will inhibit move of a content to the portable 
device 6. That is, in this case, since the conditions reg- 
istered in the music data base cannot be followed by the 
5 portable device 6, content move to the portable device 6 
is inhibited. 

[0233] If it is determined at step S1 04 that such set- 
table conditions exist, the move management program 
1 34 goes to step S1 06 where it will make the usage rule 

w conversion program 1 39 convert the conditions to those 
in the function format of the destination (for example, 
conditions which are stored in the header when the 
selected content is transferred to the portable device 6). 
Then at step S1 07, the move management program 1 34 

is will set the converted conditions in the destination. As a 
result, the portable device 6 will be able to play back the 
content according to the set conditions (or following the 
conditions). 

[0234] Next, copying of a content from the HDD 21 

20 to the portable device 6, effected by the CPU 1 1 which 
executes the content management program 111 and 
CPU 53 which executes the main program, will be 
described herebelow with reference to the flow chart in 
FIGS. 1 8 to 20. The operations at steps S1 1 1 to S1 27 in 

25 FIGS. 18 to 20 are effected by the copy management 
program 133. These operations are similar to those at 
steps 51 to 67 for the content move from the HDD 21 to 
the portable device 6 as in FIGS. 12 to 14. Also in this 
case, the music data base is checked to see if it has 

30 been falsified or altered, and then the playback condi- 
tions for the selected content are checked with those 
recorded in the music data base. Further, after mutual 
authentication is made between the portable device 6 
and personal computer 1, the content is transferred 

35 from the HDD 21 of the personal computer 1 to the flash 
memory 61 of the portable device 6, where it is saved. 
Thereafter at step S128, the copy management pro- 
gram 133 will increment the copy counter in the music 
data base by one. At step S129, the copy management 
40 program 133 makes the CPU 32 compute the hash 
value of the entire music data base, and save it into the 
nonvolatile memory 34. 

[0235] Next, content move from the portable device 
6 to HDD 21 and check-in operation, effected by the 
45 CPU 1 1 which executes the content management pro- 
gram 111 and CPU 53 which executes the main pro- 
gram, will be described herebelow with reference to the 
flow chart in FIG. 21. 

[0236] First, the content move will be explained. At 
so step S161, the move management program 134 
requests the CPU 53 of the portable device 6 to read 
content information stored in the flash memory 61. 
Upon reception of the request from the move manage- 
ment program 134, the CPU 53 will transmit to the per- 
55 sonal computer 1 the content information stored in the 
flash memory 61. Based on the information, the move 
management program 134 makes the display unit 20 
display GUI for selection of the contents stored in the 
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flash memory 61 . According to the GUI displayed on the 
display unit 20, the user will operate the keyboard 18 or 
mouse 1 9 to designate a content which is to be moved 
from the portable device 6 to the HDD 21 (content data 
base 114). 

[0237] At step S162, the move management pro- 
gram 134 makes the authentication program 141 exe- 
cute a mutual authentication with the CPU 53 to 
generate a communication key for common use 
between them. This operation is similar to that at step 
S56in FIG. 12. 

[0238] Next at step S1 63, the CPU 53 will read the 
encrypted selected content stored in the flash memory 
61 , and transfers it to the personal computer 1 . At step 
S164, the move management program 134 takes, as 
one file, the content transferred from the portable device 
6 and gives a file name to it, and saves it into the content 
data base 1 14 (in the HDD 21). This save may be done 
with position information of the file (e.g., number of 
bytes from the top) given as a part of one file. 
[0239] At step S165, the CPU 53 will read the 
encrypted encryption key for the selected content, 
recorded in the flash memory 61, decrypt it with its own 
save key, further encrypt it with the communication key, 
and then transfers it to the personal computer 1 . The 
encryption key is a one having been saved in the flash 
memory 61 in the operation at step S67 in FIG. 14 for 
example. 

[0240] Receiving the encryption key transferred 
from the portable device 6, the move management pro- 
gram 134 makes, at step S166, the decrypting program 
1 42 decrypt the encryption key with the communication 
key, and the encryption key 137 encrypt it with its own 
save key. At step S1 67, the move management program 
134 will make the content data base 114 register, into 
the music data base in the HDD 21, the content file 
name and content information saved at step S164, 
music piece name (content name) entered by the user 
via the GUI, the encryption key encrypted at step S166, 
etc. Then at step S1 68, the move management program 
1 34 makes, via the CPU 32, the usage rule manage- 
ment program 1 40 compute the hash value of the entire 
music data base, and the nonvolatile memory 34 save it. 
[0241] At step S169, the move management pro- 
gram 1 34 informs the portable device 6 that the encryp- 
tion key has been saved, and requests it to delete the 
content. When requested from the personal computer 1 
to delete the content, the CPU 53 will delete, at step 
S1 70, the content stored in the flash memory 61 . 
[0242] Next, the check-in of a content from the port- 
able device 6 to the personal computer 1 will be 
described herebelow. The operations of content check- 
in from the portable device 6 to the personal computer 
is similar to the content move from the portable device 6 
to the personal computer 1 as in FIG. 21. That is, the 
check-in operation is effected by the check-in/check-out 
management program 132 in the personal computer 1 , 
and the operations at steps S1 62 to S1 66 in FIG. 21 are 
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omitted. Also, the personal computer 1 will update, at 
step S167 in FIG. 21, the check-out limit, namely, a 
number of times the checked-in content can be checked 
out, recorded in the music data base, and after comple- 

5 tion of the operation at step S170, operations basically 
similar to those in the content move except for the con- 
firmation of the content file deletion will be effected. 
Therefore, the operations will not further be described. 
[0243] Note that when the flash memory 61 of the 

10 portable device 6 is removable as a memory card, the 
personal computer 1 will effect the mutual authentica- 
tion at step S162 in FIG. 21 in the check-in procedure. 
[0244] Next, content copy from the portable device 
6 to the HDD 21, effected by the CPU 11 which exe- 

15 cutes the content management program 1 1 1 and CPU 
53 which executes the main program, will be described 
herebelow with reference to the flow chart in FIG. 22. 
Operations at steps S181 to S188 in FIG. 22 are similar 
to those at steps SI 61 to S168 (in FIG. 21) in the con- 

20 tent move from the portable device 6 to the HDD 21. 
That is, the copy is effected by the copy management 
program 133, and the copy operation is basically similar 
to the move operation except for the omission of the 
operations at steps S169 and S170 in FIG. 21. There- 

25 fore, the copy operation will not be described any fur- 
ther. 

[0245] Next, copy of the content transferred from 
the EMD server 4 to the HDD 21, effected by the EMD 
server 4 and CPU 1 1 which executes the content man- 

30 agement program 111, will be described below with ref- 
erence to the flow chart in FIG. 23. When the user clicks 
the button 202 in FIG. 5 to make an instruction for 
access to the EMD server 4, the purchase program 144 
makes, at step S201, the communications block 25 

35 access the EMD server 4 via th network 2. In response 
to the access, the EMD server 4 will transfer information 
such as music piece number, title, information of a con- 
tent held therein to the personal computer 1 via the net- 
work 2. Upon acquisition of the information, the 

40 purchase program 144 makes the display/ope ratio n- 
instructive program 112 display the information on the 
display unit 20 via the interface 17. Using the GUI dis- 
played on the display unit 20, the user will designate, at 
step S202, a content he wants to copy. The designated 

45 information is transferred to the EMD server 4 via the 
network 2. At step S203, the purchase program 144 will 
effect a mutual authentication between itself and EMD 
server 4 via the network 2 to generate a communication 
key for common use between them. 

so [0246] The mutual authentication effected between 
the personal computer 1 and EMD server 4 may be 
done using a public key and private key defined in ISO 
9798-3 for example. In this case, the personal computer 
1 has its own private key and a public key for the EMD 

55 server 4 in advance, and the EMD server 4 has its own 
private key. The mutual authentication between the per- 
sonal computer 1 and EMD server 4 is effected using 
these keys. The public key of the personal computer 1 
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may be made available to the personal computer 1 by 
transferring it from the EMD server 4 or a certificate hav- 
ing previously been distributed to the personal compu- 
ter 1 for confirmation of the certificate by the EMD 
server 4. Further, at step S204, the purchase program 
114 will make an accounting operation between itself 
and EMD server 4. The accounting operation will further 
be described later with reference to the flow chart in 
FIG. 24. 

[0247] Next at step S205, the EMD server 4 trans- 
fers the encrypted content designated at step S202 to 
the personal computer 1 via the network 2. At this time, 
it transfers a time information at any time to the personal 
computer 1. At step S206, the purchase program 144 
will give a file name to the transferred content and make 
the content data base 1 1 4 save it as one content file 
161 into the HDD 21. At step S207, the EMD server 4 
will further encrypt the encryption key for the content 
using the communication key common to itself and per- 
sonal computer 1 , generated at step S203, and transfer 
the encrypted encryption key to the personal computer 
1. 

[0248] At step S208, the purchase program 144 
makes the decryption program 142 to decrypt the 
encryption key transferred from the EMD server 4 using 
the communication key independently or in cooperation 
with the CPU 32 of the adaptor 26, and makes the 
encryption program 137 encrypt the decrypted encryp- 
tion key with its own save key. At step S209, the pur- 
chase program 1 44 will make the content data base 1 1 4 
register into the music data base in the HDD 21 a set of 
the file name of the content, content information, music 
piece title entered by the user, and encrypted encryp- 
tion key. Further at step S210, the purchase program 
144 makes the CPU 32 compute the hash value of the 
entire music data base, and save it into the nonvolatile 
memory 34. 

[0249] Note that at step S205, the EMD server 4 will 
transmit the content along with the time data to the per- 
sonal computer 1 . The time data is transferred from the 
personal computer 1 to the adaptor 26. Upon reception 
of the time data transferred from the personal computer 
1 , the CPU 32 of the adaptor 26 corrects the time of the 
RTC 35 at step S21 1 . Thus, based on the time informa- 
tion provided from an external device having been rec- 
ognized as a correct device as the result of the mutual 
authentication, the time information of the RTC 35 of the 
adaptor 26 is corrected, so that the adaptor 26 can 
always keep correct time information. 
[0250] Next, accounting effected at step S204 in 
FIG. 23 by the EMD server 4 and CPU 1 1 which exe- 
cutes the content management program 111, will be 
described herebelow with reference to the flow chart in 
FIG. 24. At step S221, the purchase program 144 read 
price information for the selected content designated at 
step S202 from price information transmitted from the 
EMD server 4 at step S201 , and write it into an account- 
ing log in the HDD 21. FIG. 25 shows an example of 



such accounting log. In this example, the user has cop- 
ied items 1 to 3 from the EMD server 4, and the price for 
the items 1 and 2 is 50 yens while that for the item 3 is 
60 yens. The hash value of this accounting log has been 
5 computed by the CPU 32, and registered in the nonvol- 
atile memory 34. 

[0251] Next at step S222, the purchase program 
144 will read the accounting log written at step S221 
from the HDD 21 , and transfers it to the EMD server 4 
w via the network 2. At step S223, the EMD server 4 
makes an accounting computation based on the 
accounting log transferred from the personal computer 
1. That is, the EMD server 4 adds to a data base pro- 
vided therein an accounting log transmitted from the 
15 user of the personal computer 1 to update the data 
base. At step S224, the EMD server 4 judges whether 
the accounting log is to be settle immediately. When it is 
determined that the accounting log is to be settled 
immediately, the EMD server 4 goes to step S225 
20 where it will transfer to a settling server (not shown) a 
trade name, money amount, etc. necessary for the set- 
tlement. Then at step S226, the settling server will effect 
a settlement to the user of the personal computer 1 . If it 
is determined at step S224 that the accounting log is not 
25 to be settled immediately, operations at steps S225 and 
S226 will be skipped over. Namely, these operations will 
be done periodically, for example, once a month. 
[0252] Next, copying to the HDD 21 of a content 
having been played back by a CD player (not shown) 
30 and entered from the IEC60958 terminal 24a of the 
audio input/output terminal 24, effected by the CPU 1 1 
which executes the content management program 111, 
will be described below with reference to the flow chart 
shown in FIGS. 26 and 27. At step S241 , the user con- 
35 nect the IEC60958 output terminal of the CD player to 
the IEC60958 terminal 24a of the audio input/output 
interface 24 of the personal computer 1 . At step S242, 
the user operates the keyboard 1 8 or mouse 1 9 to enter 
the music piece title of a content to be copied from the 
40 CD player (or a number for the content). Then at step 
S243, the user operate a button on the CD player to 
start playing the CD player. In case a control signal 
transmission/reception line is connected between the 
CD player and personal computer 1 , the user may oper- 
45 ate the keyboard 1 8 or mouse 1 9 of the personal com- 
puter 1 to enter a playback start instruction for making 
the CD player start playing the CD. 
[0253] When the CD player starts playing the CD, a 
content read out of the CD is transferred, at step S244, 
so to the personal computer 1 via the IEC60958 terminal 
24a. At step S245, the copy management program 133 
reads SCMS (serial copy management system) data 
from the data entered via the IEC60958 terminal 24a. 
The SCMS data includes copying condition information 
55 such as inhibition of copy, permission of one copy, per- 
mission of free copy, etc. At step S246, the CPU 1 1 
judges whether the SCMS data indicates inhibition of 
copy. If the SCMS data indicates the copy inhibition, the 
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copy management program 133 goes to step S247 
where it will make the dispi ay/operation-instructive pro- 
gram 112 display a message like "Copy is inhibited" on 
the display unit 20, and terminate the copy operation. In 
this case, copy to the HDD 21 is inhibited. 5 
[0254] At step S246, when it is determined by the 
CPU 1 1 that the SCMS information read at step S245 
does not indicate any copy inhibition, the copy manage- 
ment program 1 33 will go to step S248 where it reads a 
watermark code, and at step S249, it will judge whether w 
the watermark code indicates inhibition of copy. When 
the watermark code indicates the copy inhibition, the 
copy management program 133 goes to step S247 
where it will make the display/operation-instructive pro- 
gram 112 display a predetermined message as in the 15 
above and terminate the copy operation. 
[0255] If it is determined at step S249 that the 
watermark code does not indicate any copy inhibition, 
the copy management program 133 goes to step S250 
where it will check the time limit data base. If the 20 
selected content is found already been registered as the 
result of the checking of the time limit data base, the 
operation is ended with operations at steps S251 and 
S252. These operations are similar to those at steps 
S13 and S14 shown in FIG. 7. 25 
[0256] If the selected content is not a content hav- 
ing not yet been registered in the HDD 21 , it will be reg- 
istered at steps S253 to S258. The operations at steps 
S253 to S258 are similar to those at steps S19 to S24 in 
FIG. 7 except that the SCMS information supplied from 30 
the IEC60958 terminal 24a is also registered in the 
music data base at step S257. Therefore, the opera- 
tions will not be described any further, 
[0257] Next, output (playback) of a content from the 
HDD 21 to the IEC60958 terminal 24a, effected by the 35 
CPU 1 1 which executes the content management pro- 
gram 1 1 1 , will be described herebelow with reference to 
the flow chart shown in FIGS. 28 and 29. At steps S271 
to S273, the hash value of the entire music data base is 
computed as at steps S1 1 1 to S1 13 in FIG. 1 8, and it is 40 
judged whether the hash value coincides with a one 
previously saved to check whether the music data base 
has been falsified or altered. If it is determined that the 
music data base has not been falsified, the dis- 
play/operation-instructive program 112 goes to step 45 
S274 where it will make, via the content management 
program 111, the content data base 1 1 4 access the 
music data base in the HDD 21, read information on 
music pieces registered in the music data base, and dis- 
play it on the display unit 20. Watching the display, the 50 
user operates the keyboard 1 8 or mouse 1 9 in an appro- 
priate manner to select a content which the user wants 
to play back. At step S275, the disp lay/ope ration - 
instructive program 1 12 checks the playback conditions 
for the selected content. The check of the playback con- 55 
ditions will further be described later with reference to 
the flow chart in FIG. 30. 

[0258] Next at step S276, the disp lay/ope ratio n- 



instructive program 112 makes, via the content man- 
agement program 1 1 1 , the content data base 1 1 4 read 
from the music data base an encryption key for the con- 
tent selected at step S274, and the decryption program 
142 decrypt the encryption key with the save key. At 
step S277, the display/ope ration -instructive program 
112 makes, via the content management program 111, 
the content data base 114 reads from the music data 
base SCMS information of the selected content, and 
determines SCMS information to be outputted from the 
IEC60958 terminal 24a according to the rule for the 
SCMS system. For example, when the number of times 
a content can be played back is limited (namely, as a 
playback limit), the playback counter is incremented by 
one. The playback count thus incremented is taken as 
new SCMS information. At step S278, the display/oper- 
ation-instructive program 112 will further make, via the 
content management program 111, the content data 
base 114 read ISRC for the selected content from the 
music data base. 

[0259] Next at step S279, the disp I ay/ope ratio n- 
instructive program 1 12 will make, via the content man- 
agement program 1 1 1 , the content data base 114 read 
the file name form the selected content from the music ' 
data base, and then read the content from the HDD 21 
based on the file name. Further the display/operation- 
instructive program 112 will further make, via the con- 
tent management program 111, the content data base 
114 read an encryption key for the content from the 
music data base, and the decryption program 142 
decrypt the encryption key with the save key and then 
decrypt the encrypted content with the decrypted 
encryption key. The compression/expansion program-. 
138 will further decrypt (expand) the compression code 
for the content. At step S280, the display/ope ratio n- 
instructive program 112 makes the driver 1 1 7 output, at 
the IEC60958 24a, the decrypted content (digital data) 
read at step S279 along with the SCMS information 
determined at step S277 and ISRC information read at 
step S278 according to the IEC60958 rule. Further- 
more, the display/operation-instructive program 112 will 
put a program such as real player (trade mark; not 
shown) into run to convert the content being a digital 
data to an analog data and output it at the analog output 
terminal of the audio input/output interface 24. 
[0260] At step S281, the disp lay/ope rati on -instruc- 
tive program 112 will make, via the content manage- 
ment program 111, the content data base 1 1 4 
increment the playback counter in the music data base 
by one. At step S282, it is judged whether the selected 
content has playback accounting conditions added 
thereto. If the selected content has the playback 
accounting conditions added thereto, the display/opera- 
tion-instructive program 1 12 goes to step S283 where it 
will make, via the content management program 111, 
the content data base 114 write a corresponding fee 
into the accounting log. At step S284, the display/oper- 
ation-instructive program 112 makes, via the usage rule 
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management program 140, the CPU 32 compute the 
hash value of the entire music data base and store it 
into the nonvolatile memory 34. If it is determined at 
step S282 that the selected content has no playback 
accounting conditions added thereto, the display/opera- 
tion-instructive program 1 12 will skip over operations at 
steps S283 and S284. 

[0261] Next, checking of playback conditions at 
step S275 in FIG. 28, effected by the CPU 1 1 which exe- 
cutes the content management program 111, will be 
described below in detail with reference to the flow chart 
shown in FIG. 30. At step S301, the display/ope ratio n- 
instructive program 112 will make, via the content man- 
agement program 111, the content database 114 read 
various conditions in the music database. At step S302, 
the usage rule management program 140 judges 
whether the playback count in the conditions read from 
the music data base is over the playback limit. If the 
playback count is over the playback limit, the usage rule 
management program 140 goes to step S303 where it 
will make, via the content management program 111, 
the content data base 1 1 4 delete the selected content 
from the HDD 21 and the information on the selected 
content from the music data base. At step S304, the dis- 
play/operation-instructive program 112 will further 
make, via the usage rule management program 140, 
the CPU 32 compute a new hash value of the music 
data base and save it into the nonvolatile memory 34. In 
this case, the playback (output) is inhibited. 
[0262] If it is determined at step S302 that the play- 
back count is not over the playback limit, the usage rule 
management program 140 goes to step S305 where it 
will judge whether the playback end date is past the 
present date. If the playback end date is past the 
present date, the display/operation-instructive program 
112 will make, at step S303, the usage rule manage- 
ment program 140 delete the selected date from the 
HDD 21 and also from the music data base as in the 
above. At step S304, a new hash value of the music 
data base is computed and saved. Also in this case, the 
playback (output) is inhibited. 

[0263] If it is determined at step S305 that the play- 
back end date is not past the present date, the CPU 32 
goes to step S306 where it will judge whether the 
selected content has the playback accounting condi- 
tions added thereto. If the selected content has the play- 
back accounting conditions added thereto, the 
display/operation-instructive program 1 1 2 goes to step 
S307 where it will make the display unit 20 display a 
message of the addition of the playback accounting 
conditions and a fee. If it is determined at step S306 that 
the selected content has no playback accounting condi- 
tions added thereto, operation at step S307 will be 
skipped over. 

[0264] Next, playback (output) of a content from the 
HDD 21 via the portable device 6, effected by the CPU 

I I which executes the content management program 

III and CPU 53 which executes the main program, will 



be described below with reference to the flow chart 
shown in FIGS. 31 and 32. At steps S321 to S325, the 
music data base is checked for any falsification or alter- 
ation, the selected content is designated, and playback 
5 conditions for the selected content are checked. These 
operations are similar to those at steps S271 to S275 in 
FIG. 28, and so will not be described any longer. 
[0265] At step S326, a mutual authentication is 
effected between the portable device 6 and personal 
w computer 1 to generate a communication key for com- 
mon use between them. At step S327, the display/oper- 
ation-instructive program 112 instructs the portable 
device 6 to play back an encrypted content which is 
going to be supplied. At step S328, the display/ope ra- 
ts tion-instructive program 112 will make, via the content 
management program 111, the content data base 114 
read S324 from the music data base the designated file 
name of the content selected at step, and the content 
having the file name from the HDD 21 . At step S329, the 
20 display/ope ration -instructive program 112 will make the 
content management program 1 1 1 convert the content 
compression method, encryption method and format to 
those used in the portable device 6. Further at step 
S330, the display/operation-instructive program 112 
25 makes the encryption program 137 encrypt the content 
converted at step S329 with the communication key, 
and transfer it to the portable device 6. 
[0266] At step S331, the CPU 53 of the portable 
device 6 responds to an instruction transferred from the 
30 personal computer 1 at step S327 to decrypt each 
transferred data with the communication key and play it 
back. At step S332, the display/operation-instructive 
program 112 will make, via the content data base 114, 
the content management program 1 1 1 increment the 
35 playback counter in the music data base by one. Further 
at step S333, the display/operation-instructive program 
112 will judge whether the selected content has play- 
back accounting conditions added thereto. If the 
selected content has the playback accounting condi- 
40 tions added thereto, the display/operation-instructive 
program 112 makes, via the content management pro- 
gram 1 1 1 at step S334, the content data base 1 1 4 write 
a fee for the playback into an accounting log. At step 
S335, the display/ope rati on -instructive program 112 will 
45 make the CPU 32 compute and save a new hash value 
of the entire music data. If the selected content has no 
such playback conditions added thereto, operations at 
steps S334 and S335 will be skipped over. 
[0267] The present invention provides various 
so arrangements for prevention of a content from fraudu- 
lently being copied. For example, the program to oper- 
ate the CPU 1 1 is a so-called tamper-resistant software 
of which the executing sequence varies at each opera- 
tion of the CPU 11. 
55 [0268] Further, the function of the CPU 1 1 is par- 
tially shared by the adaptor 26 as a hardware so that 
both the CPU 1 1 and adaptor 26 work together to exe- 
cute a variety of operations. Thus, a higher date security 
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is ensured. 

[0269] For example, the hash value of the music 
data base is not saved in the music data base itself as 
in the above, but in the nonvolatile memory 34 of the 
adaptor 26. Namely, in the comparison with the hash 5 
value previously saved as at steps S32 and S33 in FIG. 
8 for example, the previous hash value for comparison 
is stored in the nonvolatile memory 34. Thereby, atl the 
records including a content saved in the HDD 21 can be 
backed up before they are copied or moved to any other 10 
recording medium. After a content saved in the HDD 21 
is copied or moved from the HDD 21 to any other 
recording medium, a content included in the records 
backed up in the HDD 21 can be restored again, 
whereby it is made possible to prevent the content from is 
being copied or moved substantially limitlessly disre- 
garding the usage rule. 

[0270] For example, when contents A and B are 
saved in the HDD 21 as shown in FIG. 33, hash values 
for the contents A and B are saved in the nonvolatile 20 
memory 34. It is assumed here that in this condition, a 
part or all of recorded data including the contents A and 
B in the HDD 21 are backed up in other recording 
medium 271. When the content A in the HDD 21 is 
moved to a further recording medium 272 after that, 25 
only the content B will remain in the content recorded in 
the HDD 21, so that the hash value in the nonvolatile 
memory 34 is also changed to a one for the content B. 
[0271] When a part or all of the recorded data in the 
HDD 21, backed up in the recording medium 271, is 30 
restored in the HDD 21 thereafter and the contents A 
and B are saved again into the HDD 21 , a hash value 
computed from information of the content B will be 
found stored in the nonvolatile memory 34 while the 
hash value computed from the information of the con- 35 
tents A and B will not be found stored in the nonvolatile 
memory 34. Thus, the hash value computed based on 
the contents A and B stored on the HDD 21 will not coin- 
cident with the previous hash value stored in the nonvol- 
atile memory 34, and it will be detected that the music 40 
data base has been falsified. As a result, the usage of 
the contents A and B saved in the HDD 21 will be limited 
thereafter. 

[0272] Further, as having been described in the 
above, the adaptor 26 incorporates the RTC 35. The 45 
RTC 35 has the time information corrected based on a 
time data transferred from any other device (e.g., EMD 
server 4) which could correctly be authenticated. A 
present date outputted from the RTC 35, not any one 
managed by the personal computer 1 , is used. There- 50 
fore, the user will not be able to intentionally edit the 
present data in the personal computer 1 to any past 
time for avoiding that the present time is judged to be 
past the playback end date included in the playback 
conditions. 55 
[0273] Also the adaptor 26 is designed to decrypt a 
transferred encrypted program according to a program 
previously stored in the ROM 36 and execute the pro- 



gram, so that a higher data security can be assured. 
This will further be described below with reference to 
the flow chart shown in FIG. 34. 

[0274] More specifically, when the personal compu- 
ter 1 is going to execute a predetermined operation for 
the adaptor 26, it will encrypt, at step S351, a program 
to be executed by the adaptor 26 with an encryption key 
previously stored in the RAM 1 3, and transfer it to the 
adaptor 26. The RAM 13 of the adaptor 26 has previ- 
ously stored therein a program transferred from the per- 
sonal computer 1 and intended to decrypt and execute 
the encrypted program. The CPU 32 follows this pro- 
gram stored in the RAM 36 to decrypt at step S352 the 
encrypted program stored in the RAM 36. The CPU 32 
will develop the decrypted program to the RAM 33 at 
step S313, and execute it at step S354. 
[0275] As having been described in the foregoing, 
when the adaptor 26 is made to compute a hash value 
of the music data base in the HDD 21 for example, the 
CPU 1 1 of the personal computer 1 will encrypt the data 
in the music data base with the encryption key and 
transfer it to the CPU 32 of the adaptor 26. The CPU 32 
will apply the hash function to the transferred data in the 
music data base to compute a hash value. The hash" 
value thus computed is stored into the nonvolatile mem- ' 
ory 34. Alternatively, the CPU 32 compares the hash 
value with a previous one having been stored in 
advance, and transfer the result of computation to the. 
CPU 1 1 of the personal computer 1 . 
[0276] FIG. 35 shows in detail the internal construc- 
tion of the adaptor 26. The adaptor 26 is formed as a 
semiconductor IC. As shown in FIG. 35, the adaptor 26 
includes, in addition to the interface 31, CPU 32, RAM * 
33, nonvolatile memory 34, RTC 35, ROM 36 as shown 
in FIG. 2, a RAM controller 301 to control write and read ' 
to and from the RAM 33, and a logic circuit 302 provided 
for use to output directly from the adaptor 26 an 
encrypted content having been decrypted as in the 
above. 

[0277] The blocks from the interface 31 to ROM 36, 
RAM controller 301 and logic circuit 302 are integrally 
built in the semiconductor IC in such a manner that they 
cannot be disassembled from outside. 
[0278] Further, a crystal oscillator 31 1 is provided to 
generate a clock for a reference in execution of various 
operations by the adaptor 6. Also an oscillator circuit 
312 is provided to put the RTC 35 into operation. The 
adaptor 26 further includes a battery 313 which sup- 
plies backup power to the oscillator circuit 312, nonvol- 
atile memory 34 and RTC 35. In addition, the 
component circuits of the adaptor 26 are supplied with a 
power from a power supply circuit 321 of the personal 
computer 1 . 

[0279] The nonvolatile memory 34 may be com- 
posed of an erasable ROM. In case it is composed of a 
RAM backed up by the backup power from the battery 
313, however, a protective aluminum layer 351 may be 
formed on the nonvolatile memory 34 and a power 
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source pattern 352 to supply the nonvolatile memory 34 
with the power from the battery 31 3 be formed flush with 
the protective aluminum layer 351 , as shown in FIGS. 
36A and 36B for example. Thus, if the user tries to 
remove the protective aluminum layer 351 in order to 5 
alter the nonvolatile memory 34, the power source pat- 
tern 352 flush with the nonvolatile memory 34 will also 
be removed, power supply to the nonvolatile memory 34 
will be shut off, and data stored in the memory 34 will be 
erased. In this way, the tamper-resistance can further 10 
be improved. 

[0280] Further, the adaptor 26 has wires 401-1 to 
401 -3 provided to write or read date to or from the non- 
volatile memory 34. The wires 401-1 to 401-3 are 
formed to vertically overlap each other as shown in FIG. 15 
37. Thus, for reading data from the lowest wire 401-3, 
the wires 401 -1 and 401 -2 above the wire 401 -3 have to 
be removed. Thus, data cannot be read simultaneously 
from the wires 401 -1 to 401 -3. 

[0281 ] Also, the wires 401 -1 to 401-3 of the nonvol- 20 
atile memory 34 may be formed redundantly. For exam- 
ple, when the wires 401-1 to 401-3 formed inside the 
nonvolatile memory 34 are used to connect elements 
such as transistors forming the nonvolatile memory 34, 
paths for them are formed not linearly even if the ele- 25 
ments can be connected linearly by wires but they are 
formed to have a predetermined length. Thus, the wires 
401-1 to 401-3 will be longer than required and have a 
larger parasitic capacitance than that which would be 
when the wires are a minimum necessary length. 30 
[0282] Tne dedicated circuit (incorporated in the 
adaptor 26 being a semiconductor IC) designed for data 
read from the nonvolatile memory 34 can normally read 
data stored in the nonvolatile memory 34 when an 
impedance matching its parasitic capacitance is set. 35 
However, when a probe is connected to the wires 401-1 
to 401 -3 in order to read data from the nonvolatile mem- 
ory 34, the combination of the parasitic capacitance and 
probe capacitance will result in an influence due to 
which data cannot normally be read from the nonvolatile 40 
memory 34. 

[0283] In the foregoing, the portable device 6 has 
been used to explain the recording medium, but it 
should be noted that the present invention is applicable 
in data move or copy to any other recording medium. 45 
[0284] The content may be image and other data in 
addition to the musical sound data such as music or 
audio data. 

[0285] As having been described in the foregoing, 
the present invention is advantageous as will be 50 
described below: 

(1) According to the present invention, data is 
encrypted for recording into the HDD 21 and the 
encryption key is encrypted with the save key for 55 
recording into the HDD 21 . Thus, even if a content 
recorded in the HDD 21 is copied, it cannot be 
decrypted so that it cannot be copied in large vol- 



ume for distribution. 

(2) According to the present invention, when a pre- 
determined music piece is copied once, its title and 
recording date are registered in the music data 
base in order to prevent the music piece from being 
copied for a predetermined period of time (48 hours 
in the aforementioned example). Thus, the number 
of times the music piece can be copied can be lim- 
ited to prevent the music piece from being copied in 
a large volume for distribution. 

Further according to the present invention, 
each time the data base is updated, the hash data 
of the data is computed and saved. Thus, it is easy 
to prevent the data base from being falsified or 
altered. 

(3) According to the present invention, once a con- 
tent is passed to an external device, a correspond- 
ing one in the HDD 21 is erased. Thus, the content 
being an original digital data will not remain n the 
HDD 21 and it cannot be copied in a large amount 
for distribution. 

(4) According to the present invention, the music 
data base is provided in the HDD 21 to check the 
hash value of the entire music data vase at each 
time. Thus, even if a content in the HDD 21 is 
backed up before being moved and the backed-up 
data is restored into the HDD 21 just after the con- 
tent is moved, it is possible to positively erase the 
data in the content source. 

(5) According to the present invention, before data 
is passed from the personal computer 1 to an exter- 
nal device, a mutual authentication is done between 
the personal computer 1 and external device. Thus, 
the data can be prevented from being passed to 
any wrong device. 

(6) According to the present invention, before data 
is passed from any external device to the personal 
computer 1 , it is confirmed by a mutual authentica- 
tion between the external device and personal com- 
puter 1 whether the software of the personal 
computer 1 is a legal one. Thus, it is possible to pre- 
vent a content from being passed to any wrong soft- 
ware. 

(7) According to the present invention, I SRC is 
used to identify a music piece, and if no ISRC is 
available, TOC is used. Thus, even when no ISRC 
is available for a music piece, it is possible to iden- 
tify the music piece. 

(8) According to the present invention, a predeter- 
mined part of the software function of the personal 
computer 1 is performed by the adaptor 26 pro- 
vided as an external device connected to the per- 
sonal computer 1. Thus, just with analysis of the 
software of the personal computer 1 , it is not possi- 
ble to know how the software as a whole works. 
Therefore, it is impossible to add any intended func- 
tion to the software by falsifying or altering. 
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[0286] Note that the operations which are to be con- 
ducted by the adaptor 26 may be done by the CPU 1 1 
according to a security program. In this case, save keys 
having the same value are generated by the content 
management program 1 1 1 when a save key becomes 5 
necessary, for example. Similarly, the hash value is con- 
cealed for saving by th content management program 
111. 

[0287] Also, when an operation which is to be con- 
ducted by the adaptor 26 is done by the CPU 1 1 accord- 10 
ing to the security program, the personal computer 1 
downloads a present time data from a predetermined 
server (e.g., EM)) registration server 3) connected to 
the network 2 instead of a present time supplied from 
the RTC 35 of the adaptor 26, and effects a judgement 15 
based on the present time data. Also, the personal com- 
puter 1 may be designed, for this purpose, to store 
present times at predetermined time intervals and dis- 
play an error when a time before a stored present time 
is set, thereby accepting any intentional time setting. 20 
[0288] The aforementioned series of operations 
may be conducted by the hardware and also by the soft- 
ware. In the latter case, a program forming the software 
will be installed from a program storage medium into a 
computer incorporated in a dedicated hardware or a 25 
general-purpose personal computer, for example, in 
which a variety of functions can be performed according 
to various programs installed therein. 
[0289] As shown in FIG. 2, the program storage 
medium which stores a program installed in a computer 30 
and made executable by the computer includes the 
magnetic disc 41 (including a floppy disc), optical disc 
42 (CD-ROM (= compact disc-read-only memory)), 
DVD (digital versatile disc), magneto-optical disc 43 
(MD (= mini-disc)), package medium formed from the 35 
semiconductor memory 44, ROM 12 in which the pro- 
gram is stored provisionally or permanently, or HDD 21 . 
The program is stored into the program storage medium 
via the interface such as the communications block 25 
as necessary by using the network 2 such as a local 40 
area network (LAN) or Internet, cable or radio communi- 
cations media such as digital satellite broadcasting. 
[0290] Note that the operations of describing a pro- 
gram for storage into the program storage medium, 
referred to herein, include those which are done time- 45 
serially along a described sequence and those which 
are not effected time-serially but in parallel or individu- 
ally. 

[0291 ] Also note that the "system" referred to herein 
means an assembly of a plurality of devices. 50 
[0292] As in the foregoing, the information process- 
ing apparatus and method, and the program storage 
medium, according to the present invention, are 
adapted to control accumulation or read of content data 
into or from the storage means by a controlling means 55 
made of a software on the basis of results of operations 
of the program executing means provided in the hard- 
ware, thereby permitting to positively prevent data from 
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fraudulently being copied by analysis and falsification of 
the software. 

Claims 

1. An information processing apparatus comprising: 

means for storing content data; 
a controlling means having a software which 
controls storage or read of the content data into 
or from the content data storage means; and 
means provided in a hardware independent of 
the controlling means to decrypt and execute 
an encrypted program supplied from the con- 
trolling means and supply the result of the pro- 
gram execution to the controlling means; 
the controlling means controlling the content 
data storage or read to or from the content data 
storage means based on the program execu- 
tion result supplied from the program executing 
means. 

2. The apparatus as set forth in Claim 1 , wherein: 

the content data storage means stores also 
management information with which the con- 
tent data stored in itself is managed; and 
the controlling means makes the program exe- 
cuting means execute a predetermined compu- 
tation based on the management information. 

3. The apparatus as set forth in Claim 1 , wherein: • „ 

. .» 

the controlling means is a CPU; 

the content data storing means is a hard disc; 

and 

the program executing means is a CPU incor- 
porated in a semiconductor IC other than a one 
in which the CPU as the controlling means is 
built. 

4. An information processing method for use in an 
information processing apparatus comprising: 

means for storing content data; 
a controlling means having a software which 
controls storage or read of the content data into 
or from the content data storage means; and 
means provided in a hardware independent of 
the controlling means to decrypt and execute 
an encrypted program supplied from the con- 
trolling means and supply the result of the pro- 
gram execution to the controlling means; 
the method comprising a step of: 
controlling storage or read of content data into 
or from the content data storage means based 
on the result of the program execution by a pro- 
gram executing means. 
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5. A program storage medium for use in an informa- 
tion processing apparatus comprising: 

means for storing content data; 
a controlling means having a software which 
controls storage or read of the content data into 
or from the content data storage means; and 
means provided in a hardware independent of 
the controlling means to decrypt and execute 
an encrypted program supplied from the con- 
trolling means and supply the result of the pro- 
gram execution to the controlling means; 
the program storage medium being intended 
for use in the controlling means and having 
recorded therein a computer-readable program 
comprising a step of controlling storage or read 
of the content data into or from the content data 
storing means based on a result of a program 
execution by the program executing means. 

6. An information processing apparatus comprising: 

means for inputting content data; 

means for storing the content data supplied 

from the input means; 

means for compressing the content data stored 
in the content data storing means in a predeter- 
mined manner; 

means for encrypting the data stored in the 
content data storing means in a predetermined 
manner; and 

means for controlling storage or read, into or 
from the content data storing means, of the 
content data compressed by the compressing 
means and encrypted by the encrypted means. 

7. The apparatus as set forth in Claim 6, wherein the 
compressing means compresses, or the encrypting 
means encrypts, different data supplied from the 
input means in the same manner. 

8. The apparatus as set forth in Claim 6, wherein the 
compressing means compresses, or encrypting 
means encrypts, different data supplied from the 
input means in the same manner, and takes a pre- 
determined common compressing or encrypting 
manner for outputting the data read from the con- 
tent data storing means to a predetermined appara- 
tus. 

9. An information processing method comprising the 
steps of: 

inputting data; 

storing the data supplied from the data input 
step; 

compressing the data stored at the data storing 
step in a predetermined manner; 



encrypting the data stored at the data storing 
step in a predetermined manner; and 
controlling storage or read of the data com- 
pressed at the compressing step and 
5 encrypted at the encrypting step. 

10. A program storage medium having recorded therein 
a program intended for execution by an information 
processing apparatus and readable by a computer, 
w the program comprising the steps of: 



inputting data; 

storing the data supplied from the data input 
step; 

compressing the data stored at the data storing 
step in a predetermined manner; 
encrypting the data stored at the data storing 
step in a predetermined manner; and 
controlling storage or read of the data com- 
pressed at the compressing step and 
encrypted at the encrypting step. 
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11. An information processing apparatus comprising: 

means for inputting content data; 
means for storing the content data supplied 
from the content data input means; 
means for holding management information for 
the content data stored in the content data stor- 
ing means; 

means for making a predetermined computa- 
tion based on the management information 
held in the management information holding 
means; and 

means for controlling the usage of the content 
data stored in the content data storing means 
according to a result of a comparison made 
between the result of the computation made by 
the computing means and that of a past com- 
putation which is stored in the content data 
storing means. 

1 2. The apparatus as set forth in Claim 1 1 , wherein the 
computing means makes the computation using a 
bash function as the management information. 

13. The apparatus as set forth in Claim 1 1 , wherein the 
data is music data and the management informa- 
tion includes identification information for identifica- 
tion of the music data. 

14. An information processing method comprising the 
steps of 

inputting data; 

storing the data supplied at the data input step; 
holding management information for the data 
stored at the data storing step; 
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making a predetermined computation based 
on the management information held at the 
management information holding step; 
storing the result of the computation made at 
the computing step; and 5 
comparing the result of the computation made 
at the computing step with a past computation 
result stored at the data storing step to control 
the usage of the data stored at the data storing 
step. w 

15. A program storage medium having recorded therein 
a program intended for execution by an information 
processing apparatus and readable by a computer, 

the program comprising the steps of: 15 

inputting data; 

storing the data supplied from the data input 
step; 

holding management information for the data 20 

stored at the data storing step; 

making a predetermined computation based 

on the management information held at the 

management information holding step; 

storing the result of the computation made at 25 

the computing step; and 

controlling the usage of the data stored at the 
data storing step according to a result of a 
comparison made between the result of the 
computation made at the computing step and 30 
that of a past computation stored at the data 
storing step. 

16. An information processing apparatus comprising: 

35 

means for transmitting and receiving data to 
and from other apparatus; 
means for holding a predetermined lock key 
and save key; 

authenticating means which uses the lock key 40 
held in the holding means when transmitting 
and receiving data to and from the other appa- 
ratus to make a mutual authentication with the 
other apparatus to generate a communication 
key; 45 
means for encrypting the communication key 
with the save key; and 

means for storing the data received by the data 
transmitting and receiving means and having 
been encrypted with the communication key 50 
correspondingly to the communication key 
encrypted by the encrypting means. 



17. The apparatus as set forth in Claim 1 6, further com- 
prising: 

an encryption key decrypting means for 
decrypting the communication key stored in the 
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storing means using the save key; and 
means for decrypting the data stored in the 
storing means. 

18. An information processing method comprising the 
steps of: 

transmitting and receiving data to and from 
other apparatus; 

holding a predetermined lock key and save key; 
using the lock key held at the holding step 
when transmitting and receiving data to and 
from the other apparatus to make a mutual 
authentication with the other apparatus to gen- 
erate a communication key; 
encrypting the communication key with the 
save key; and 

storing the data received at the data transmit- 
ting and receiving step and having been 
encrypted with the communication key corre- 
spondingly to the communication key 
encrypted at the encrypting step. 

1 9. A program storage medium having recorded therein ' 
a program intended for execution by an information 
processing apparatus and readable by a computer, 
the program comprising the steps of: 

transmitting and receiving data to and from 
other apparatus; 

holding a predetermined lock key and save key; 
using the lock key held at the holding step 
when transmitting and receiving data to and/ 
from the other apparatus to make a mutual' 
authentication with the other apparatus to gen- 
erate a communication key; 
encrypting the communication key with the 
save key; and 

storing the data received at the data transmit- 
ting and receiving step and having been 
encrypted with the communication key corre- 
spondingly to the communication key 
encrypted at the encrypting step. 

20. An information processing apparatus comprising: 

means for storing data; 

means for holding the usage rule for the data 
stored in the data storing means; 
means for judging whether or not, when mov- 
ing the data stored in the data storing means to 
other apparatus, the usage rule for the data 
stored in the data storing means is reproduci- 
ble by the other apparatus; and 
means for moving, based on the result of the 
judgment by the judging means, the data 
stored in the data storing means to the other 
apparatus along with the usage rule for the 
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data stored in the data storing means, which is 
held in the holding means. 

21. The apparatus as set forth in Claim 20, wherein the 
usage rule for the data includes: 5 

playback limiting condition; 
playback accounting condition; or 
copy limiting condition. 

10 

22. An information processing method comprising the 
steps of: 

storing data; 

holding the usage rule for the data stored at the 75 
data storing step; 

judging whether or not, when moving the data 
stored at the data storing step to other appara- 
tus, the usage rule for the data stored at the 
data storing step is reproducible by the other 20 
apparatus; and 

moving, based on the result of the judgment at 
the judging step, the data stored in the data 
storing means to the other apparatus along 
with the usage rule for the data stored at the 25 
data storing step, which is held at the holding 
step. 

23. A program storage medium having recorded therein 

a program intended for execution by an information 30 
processing apparatus and readable by a computer, 
the program comprising the steps of: 

storing data; 

holding the usage rule for the data stored at the 35 
data storing step; 

judging whether or not, when moving the data 
stored at the data storing step to other appara- 
tus, the usage rule for the data stored at the 
data storing step is reproducible by the other 40 
apparatus; and 

moving, based on the result of the judgment at 
the judging step, the data stored in the data 
storing means to the other apparatus along 
with the usage rule for the data stored at the 45 
data storing step, which is held at the holding 
step. 
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